Sample viewer

vx.netlux.org/Virus.DOS.Korolev.997

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:02:56.2171323Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-17T22:02:56.219781988Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-17T22:02:56.221865795Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-17T22:02:56.224164818Z 80 PC: 13fb9 | Set current PSP
2018-12-17T22:02:56.226642806Z 48 PC: 13fbe | Get DOS version
2018-12-17T22:02:56.228601537Z 101 PC: 14044 | Get extended country info
2018-12-17T22:02:56.230250229Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-17T22:02:56.232427444Z 74 PC: 140ac | Reallocate memory
2018-12-17T22:02:56.233947645Z 25 PC: 140e3 | Get default drive
2018-12-17T22:02:56.235173919Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:02:56.237183134Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:02:56.238534813Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:02:56.241494594Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:02:56.253771026Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:02:56.256253549Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:02:56.258783319Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:02:56.263208708Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:02:56.265854501Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:02:56.268200714Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T22:02:56.271306752Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:02:56.274379515Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.276657955Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:02:56.279535846Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.28172325Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T22:02:56.2842803Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:02:56.287117536Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:02:56.289706759Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T22:02:56.291825523Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:02:56.294962833Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.297241741Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:02:56.299266509Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T22:02:56.302349887Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T22:02:56.304764908Z 2 PC: 13e6c | Character output (Char = '44')
2018-12-17T22:02:56.307178704Z 2 PC: 13e6c | Character output (Char = '4f')
2018-12-17T22:02:56.310137805Z 2 PC: 13e6c | Character output (Char = '53')
2018-12-17T22:02:56.312591859Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:02:56.314603208Z 2 PC: 13e6c | Character output (Char = '52')
2018-12-17T22:02:56.318409584Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:02:56.320590124Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.322891446Z 2 PC: 13e6c | Character output (Char = '56')
2018-12-17T22:02:56.325644282Z 2 PC: 13e6c | Character output (Char = '65')
2018-12-17T22:02:56.327718831Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:02:56.329777645Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:02:56.333188639Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:02:56.335368037Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.337457377Z 2 PC: 13e6c | Character output (Char = '6e')
2018-12-17T22:02:56.341247925Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.343363745Z 2 PC: 13e6c | Character output (Char = '36')
2018-12-17T22:02:56.345555627Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T22:02:56.349124243Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T22:02:56.352203188Z 2 PC: 13e6c | Character output (Char = '32')
2018-12-17T22:02:56.354846809Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:02:56.358790662Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:02:56.362836831Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.365226468Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.368477761Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.370851762Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.373199968Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.376200396Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.378526824Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.38087158Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.383832596Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.390434274Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.392883859Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.396346665Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.398752726Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.401161581Z 2 PC: 13e6c | Character output (Char = '28')
2018-12-17T22:02:56.404220816Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:02:56.406531113Z 2 PC: 13e6c | Character output (Char = '29')
2018-12-17T22:02:56.40988082Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:02:56.413018313Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.416094744Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T22:02:56.418486954Z 2 PC: 13e6c | Character output (Char = '79')
2018-12-17T22:02:56.421706553Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:02:56.424328311Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:02:56.426728626Z 2 PC: 13e6c | Character output (Char = '67')
2018-12-17T22:02:56.430179399Z 2 PC: 13e6c | Character output (Char = '68')
2018-12-17T22:02:56.432357535Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:02:56.434419362Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.437574946Z 2 PC: 13e6c | Character output (Char = '4d')
2018-12-17T22:02:56.440003494Z 2 PC: 13e6c | Character output (Char = '69')
2018-12-17T22:02:56.443116666Z 2 PC: 13e6c | Character output (Char = '63')
2018-12-17T22:02:56.45403512Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:02:56.456285823Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.458711576Z 2 PC: 13e6c | Character output (Char = '73')
2018-12-17T22:02:56.462279111Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.464706739Z 2 PC: 13e6c | Character output (Char = '66')
2018-12-17T22:02:56.467163343Z 2 PC: 13e6c | Character output (Char = '74')
2018-12-17T22:02:56.470529694Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.472990517Z 2 PC: 13e6c | Character output (Char = '43')
2018-12-17T22:02:56.475651995Z 2 PC: 13e6c | Character output (Char = '6f')
2018-12-17T22:02:56.478844802Z 2 PC: 13e6c | Character output (Char = '72')
2018-12-17T22:02:56.493965779Z 2 PC: 13e6c | Character output (Char = '70')
2018-12-17T22:02:56.496306611Z 2 PC: 13e6c | Character output (Char = '20')
2018-12-17T22:02:56.500053221Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:02:56.502447134Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:02:56.505034884Z 2 PC: 13e6c | Character output (Char = '38')
2018-12-17T22:02:56.508737952Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:02:56.511220704Z 2 PC: 13e6c | Character output (Char = '2d')
2018-12-17T22:02:56.513993678Z 2 PC: 13e6c | Character output (Char = '31')
2018-12-17T22:02:56.517883116Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:02:56.520237707Z 2 PC: 13e6c | Character output (Char = '39')
2018-12-17T22:02:56.522578268Z 2 PC: 13e6c | Character output (Char = '34')
2018-12-17T22:02:56.525710365Z 2 PC: 13e6c | Character output (Char = '2e')
2018-12-17T22:02:56.528335331Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-17T22:02:56.530560584Z 2 PC: 13e6c | Character output (Char = '0a')
2018-12-17T22:02:56.53717102Z 74 PC: 12d4c | Reallocate memory
2018-12-17T22:02:56.539291162Z 72 PC: 12d8d | Allocate memory
2018-12-17T22:02:56.541179662Z 72 PC: 12dc5 | Allocate memory
2018-12-17T22:02:56.543763375Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:39.556540771Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:39.559377989Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:39.561067966Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:39.562698382Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:39.564181517Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:39.565540511Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:39.566645629Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:39.568170366Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:39.569319401Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:39.570136559Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:39.571479787Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:39.572642388Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:39.574800391Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:39.580324766Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.582690606Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.584356708Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.58713899Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.589228269Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.590709742Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.592247768Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.595529159Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.598856159Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.601428804Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.603386799Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.60497122Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.606534646Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.612444699Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.614751904Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.61688162Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.619788403Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.622125051Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.629252432Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.633783879Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.636428021Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.639063935Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.643487722Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.646022301Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.648260606Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.65111024Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.653273183Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.664350944Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.667173046Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.6695805Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.672062614Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.677879574Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.680241789Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.682471992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.684896364Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.687602018Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.689720253Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.692332081Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.69518474Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.69815122Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.702736278Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.714889039Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.717094984Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.719268385Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.721998538Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.724336843Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.726636407Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.729443816Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.731679495Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.734273724Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.737133256Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.739431556Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.741614959Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.744603099Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.747182511Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.749423389Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.752189329Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.755267203Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.757554112Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.760302431Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.763968207Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.766499341Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.770829915Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.773173017Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.77554432Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.778553467Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.781237455Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.783821312Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.786783591Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.789839704Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.792800811Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.796329204Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.79866656Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.800740211Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.804006274Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.80640431Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.808727498Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.811584617Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.81391722Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.816214178Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.819413127Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.821712462Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.824264005Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.827613808Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.830252007Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.83277097Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.835999357Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.83843989Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.840737953Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.843435118Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.845725261Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.850252792Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.854626973Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:39.875729498Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:39.877777742Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:39.879746029Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:39.881734833Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:40.057023082Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:40.060201657Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:40.062459772Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:40.064596703Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:40.065909879Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:40.067451386Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:40.068926069Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:40.074783595Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:40.076525361Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:40.077939694Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:40.081257976Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:40.082704293Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:40.086645393Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:40.089948121Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.093759274Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.095983443Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.100856423Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.103210435Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.105523127Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.108467143Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.111157522Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.113609497Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.117611337Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.121067703Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.123433399Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.12644896Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.128522961Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.13053857Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.134305181Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.137371689Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.139863451Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.143364269Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.146852569Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.149642601Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.152641092Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.155303303Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.157753737Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.160836516Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.162874229Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.164870249Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.169614279Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.171456923Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.172810594Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.174638175Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.176330271Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.177993095Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.180007782Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.181808502Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.183720414Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.195559989Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.198204083Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.200680776Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.204480026Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.208650101Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.211078487Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.213663719Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.220943375Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.223421429Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.225876217Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.229218366Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.231989887Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.234625786Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.237232443Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.239198277Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.242335938Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.245174405Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.247287069Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.24920852Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.251636135Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.253549315Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.255549548Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.258518141Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.260683325Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.26271619Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.265031439Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.266866547Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.268660328Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.270950415Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.272810007Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.274880174Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.282639406Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.28524235Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.287796801Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.291312062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.293505877Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.296285281Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.299225385Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.301198766Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.303200761Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.30632455Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.308300256Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.31027906Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.313355491Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.315298651Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.317237819Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.32049514Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.323142258Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.325058036Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.327178624Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.330880275Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.332805112Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.33533803Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.354035738Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.356429441Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.360210349Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.362529455Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.368581709Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:40.370623551Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:40.381085508Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:40.382874222Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:40.110489453Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:40.112408096Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:40.114084891Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:40.116633955Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:40.117609466Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:40.118966028Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:40.120268885Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:40.121975214Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:40.123570269Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:40.124592904Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:40.126049291Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:40.126928566Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:40.128878966Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:40.130730008Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.134381774Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.13812638Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.147859611Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.150474291Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.15295834Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.155689062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.158123912Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.161105248Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.164092098Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.166492231Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.169950641Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.177953636Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.179507884Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.181358903Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.183326195Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.184753661Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.186422007Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.189895533Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.192425106Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.195032547Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.198709396Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.201067264Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.203467539Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.207470794Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.211964199Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.214299366Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.218780451Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.221105256Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.223425715Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.227333003Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.229646221Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.231988162Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.235385787Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.238756142Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.240577025Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.242890203Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.244494462Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.246296281Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.25474404Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.257443936Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.259440718Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.262132015Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.264868582Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.267471899Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.270921013Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.2730839Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.275433307Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.279303447Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.284040685Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.286268836Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.289797748Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.291857401Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.293884748Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.296767603Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.298990995Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.301158301Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.303887806Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.305979186Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.307962181Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.311458662Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.313540089Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.315517129Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.319060252Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.321127452Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.323139369Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.337464718Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.348895594Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.351430609Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.354633873Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.356920952Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.359158746Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.384365861Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.387583466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.389724596Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.392889098Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.395279576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.39761151Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.400724538Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.403367959Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.405959132Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.409021387Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.411651478Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.413953778Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.416984626Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.419522292Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.421543429Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.424867729Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.427490885Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.429779531Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.432628267Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.436289895Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.438924188Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:40.443594457Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:40.444935745Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:40.446439097Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:40.448771554Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:42.895949634Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:42.897942585Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:42.899912907Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:42.902510293Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:42.903271916Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:42.904805322Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:42.906328622Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:42.907409037Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:42.908680869Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:42.910535571Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:42.911805562Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:42.912917161Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:42.930622444Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:42.932478002Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.935945115Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.93825565Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.941698811Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.943936133Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.947189818Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.949247488Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.951257793Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.953885795Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.956713375Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.958127994Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.960059173Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.961657702Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.963651193Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.975748648Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.977743996Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.979813075Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.98914531Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.990764125Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:42.992669304Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.00062157Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.002142424Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.003740796Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.005835448Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.007520287Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.008894853Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.011365575Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.013593025Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.015009592Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.01698307Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.0186227Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.020081646Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.023408328Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.03772469Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.040097208Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.042981616Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.045582389Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.047592439Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.049689369Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.050970745Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.053239481Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.055011214Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.056501448Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.058752741Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.06123903Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.063205442Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.065182451Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.067189477Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.069358557Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.070942198Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.072297683Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.075439908Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.078117228Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.080493164Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.083362272Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.085605803Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.087844044Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.090796668Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.092325216Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.093742116Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.095757687Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.097220142Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.098634623Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.100839419Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.102362487Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.103782229Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.10655685Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.10895882Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.110872754Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.113247628Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.115133802Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.117012344Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.119335572Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.12342324Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.125369532Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.127272895Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.129148484Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.131027333Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.133072344Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.135044804Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.137038161Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.139086618Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.140959288Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.142863924Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.145418971Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.148215744Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.150306275Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.152321522Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.154147923Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.156213218Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.158136982Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.161279576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.163509118Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.167235064Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:43.168506548Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:43.170805565Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:43.172422813Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":14,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.066769474Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.069111088Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.07200621Z 26 PC: 20024 | Set disk transfer address
2018-12-25T11:43:43.074811867Z 71 PC: 2002e | Get current directory
2018-12-25T11:43:43.078410801Z 59 PC: 20037 | Change current directory
2018-12-25T11:43:43.082833897Z 78 PC: 20049 | Find first file
2018-12-25T11:43:43.094862081Z 78 PC: 201ce | Find first file
2018-12-25T11:43:43.107777155Z 61 PC: 201f3 | Open file (Filename = '')
2018-12-25T11:43:43.109768403Z 66 PC: 201fe | Move file pointer
2018-12-25T11:43:43.111348409Z 63 PC: 2020a | Read file or device (Read 1 bytes on handle 2)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":14,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.076608075Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.079304912Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.081676046Z 26 PC: 20024 | Set disk transfer address
2018-12-25T11:43:43.082934028Z 71 PC: 2002e | Get current directory
2018-12-25T11:43:43.086607572Z 59 PC: 20037 | Change current directory
2018-12-25T11:43:43.091127505Z 78 PC: 20049 | Find first file
2018-12-25T11:43:43.097683296Z 78 PC: 201ce | Find first file
2018-12-25T11:43:43.104649535Z 61 PC: 201f3 | Open file (Filename = '')
2018-12-25T11:43:43.10724674Z 66 PC: 201fe | Move file pointer
2018-12-25T11:43:43.108543007Z 63 PC: 2020a | Read file or device (Read 1 bytes on handle 2)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":14,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.462037569Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.464642027Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.46689162Z 26 PC: 20024 | Set disk transfer address
2018-12-25T11:43:43.467968259Z 71 PC: 2002e | Get current directory
2018-12-25T11:43:43.472131115Z 59 PC: 20037 | Change current directory
2018-12-25T11:43:43.477057488Z 78 PC: 20049 | Find first file
2018-12-25T11:43:43.484194154Z 78 PC: 201ce | Find first file
2018-12-25T11:43:43.494294512Z 61 PC: 201f3 | Open file (Filename = '')
2018-12-25T11:43:43.496647827Z 66 PC: 201fe | Move file pointer
2018-12-25T11:43:43.498432304Z 63 PC: 2020a | Read file or device (Read 1 bytes on handle 2)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":14,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.633347443Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.635442026Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.637347089Z 26 PC: 20024 | Set disk transfer address
2018-12-25T11:43:43.638572873Z 71 PC: 2002e | Get current directory
2018-12-25T11:43:43.641209515Z 59 PC: 20037 | Change current directory
2018-12-25T11:43:43.644919769Z 78 PC: 20049 | Find first file
2018-12-25T11:43:43.650919612Z 78 PC: 201ce | Find first file
2018-12-25T11:43:43.656533411Z 61 PC: 201f3 | Open file (Filename = '')
2018-12-25T11:43:43.658519647Z 66 PC: 201fe | Move file pointer
2018-12-25T11:43:43.660529689Z 63 PC: 2020a | Read file or device (Read 1 bytes on handle 2)

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.910388577Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.912538619Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.91450517Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:43.916979422Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:43.918449671Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:43.920543244Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:43.922670899Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:43.923880685Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:43.92511875Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:43.926412849Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:43.927611853Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:43.92861731Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:43.931900236Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:43.933805716Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.937213797Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.939451977Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.943066984Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.945149548Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.948298331Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.950681394Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.952728099Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.956219519Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.957923132Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.959966568Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.962669745Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.965027415Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.966937576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.969275313Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.971240112Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.973534318Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.975574923Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.977758702Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.97966997Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.981847173Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.984791308Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.987487233Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.98963574Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.994317484Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.999858335Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.001278779Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.005683841Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.007793853Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.009829975Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.020470449Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.022327386Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.024250263Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.026744578Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.028673538Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.030589062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.034220321Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.036145566Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.038034922Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.040588899Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.04529519Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.047300781Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.05319964Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.055183093Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.057106308Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.059522228Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.061599923Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.063612404Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.066014552Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.067911573Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.069780527Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.072130337Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.076364964Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.07825296Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.080913572Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.082908215Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.084827183Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.087372752Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.08963329Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.091659986Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.094096483Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.096149138Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.097998721Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.10051456Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.102453336Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.104506514Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.106592342Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.108586207Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.111228745Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.113393298Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.115320264Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.117632988Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.119833435Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.121732543Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.123645524Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.125647288Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.127711282Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.129742077Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.132057672Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.134439534Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.13643018Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.138487225Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.141514243Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.144063047Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.151297806Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.153275042Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.155896898Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.158353324Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.160754438Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.163703392Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.165268215Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.167531764Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.170320897Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.174226811Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:44.175548707Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:44.177454256Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:44.17902718Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:43.85126076Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:43.854661307Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:43.857882233Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:43.860390816Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:43.862533391Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:43.86455313Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:43.865962353Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:43.868640816Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:43.870196281Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:43.871413657Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:43.873386598Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:43.874587651Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:43.877853944Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:43.880426273Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.885086514Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.887796337Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.892684604Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.897018516Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.8994576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.902410265Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.905672903Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.907924161Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.910744481Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.914367645Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.917169005Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.919641556Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.924596271Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.926447044Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.928099938Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.930040229Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.931874784Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.935040992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.937976642Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.940289803Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.942483219Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.945474099Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.948302163Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.951093846Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.954463277Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.957344218Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.961520719Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.964730781Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.967166828Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.969537562Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.974534327Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.976933386Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.979931665Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.983482782Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.987203336Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.989567872Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.992415044Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.994830208Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:43.996996402Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.00160033Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.007475696Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.010218628Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.016171992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.019010091Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.021609926Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.02516876Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.028346992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.033171669Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.036029586Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.038300673Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.040696233Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.043316817Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.046155762Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.048758244Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.051755301Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.054142308Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.056535368Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.060175721Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.061761117Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.063476619Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.065564046Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.068891585Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.070551296Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.07269793Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.074330465Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.075950689Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.078406793Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.080034728Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.081576933Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.083774113Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.085365689Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.08718385Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.08997179Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.092337229Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.094616298Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.100929913Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.103452162Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.110320822Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.113179909Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.115503171Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.117824379Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.120616371Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.122944994Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.125231796Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.129364302Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.131788661Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.134383122Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.13848862Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.141473253Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.144382212Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.149530773Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.15255387Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.157419998Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:44.159440043Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:44.162824715Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:44.16487991Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:44.374991166Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:44.37770679Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:44.380299824Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:44.382247843Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:44.383418456Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:44.384871339Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:44.385911088Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:44.38729894Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:44.388510146Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:44.389416325Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:44.397490804Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:44.398462505Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:44.40117287Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:44.403217673Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.405418255Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.406724536Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.409216995Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.410590496Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.411913121Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.414338106Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.416233192Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.418069078Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.434858614Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.436898029Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.438978495Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.442402444Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.444409558Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.446347492Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.449162404Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.451393663Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.453609448Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.456387261Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.458843117Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.460759083Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.463444647Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.465489591Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.467545993Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.470361448Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.472424867Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.474472508Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.480511664Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.482869481Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.484960897Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.492416571Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.495097975Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.496970569Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.499701142Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.501741549Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.503730641Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.506346282Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.508287576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.51030616Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.512960883Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.516568108Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.518258875Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.520140802Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.521632968Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.523235294Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.524835848Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.526733067Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.528162767Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.530136819Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.5325216Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.534585048Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.537178795Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.540274043Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.543372793Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.551864316Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.554313175Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.556739528Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.560154345Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.562616692Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.565040258Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.568392939Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.570812084Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.573135436Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.575482885Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.578705315Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.581558587Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.583676454Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.586761915Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.588681293Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.592177505Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.594178421Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.59614212Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.598439167Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.600628819Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.602709111Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.605785926Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.607938953Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.609894382Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.61262234Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.614667251Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.616739149Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.619495539Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.621606545Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.623571345Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.626484092Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.628669519Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.630749042Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.633636387Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.635816517Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.63814096Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.641126756Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.644614114Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.646705611Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.651231994Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:44.6527777Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:44.654434972Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:44.656789716Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:44.359214438Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:44.380556256Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:44.38302313Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:44.385602126Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:44.388310208Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:44.39077194Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:44.392662799Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:44.395554281Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:44.397595619Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:44.399326588Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:44.401545686Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:44.402857118Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:44.406246591Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:44.409097498Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.413084719Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.415058166Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.419147185Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.422915159Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.425535857Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.428154059Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.43146436Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.434387932Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.437215652Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.440985205Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.443460937Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.445837505Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.449089395Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.451467176Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.453717027Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.45787605Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.460350998Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.462904234Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.466405673Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.467882252Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.469437028Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.471332305Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.472991367Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.474525309Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.476468966Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.478977466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.481460061Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.483901578Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.48592322Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.489000453Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.491744094Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.494550404Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.49712861Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.499897991Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.503714647Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.506078339Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.508839049Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.511646004Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.51388449Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.51832444Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.520904767Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.523280812Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.52584442Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.528353077Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.530625904Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.533120979Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.536001125Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.538485693Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.540826816Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.543246484Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.550923585Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.553410831Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.55613567Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.5588637Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.561219039Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.563762883Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.566171296Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.568757019Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.572267739Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.575123976Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.577823519Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.585363878Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.588256761Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.591071999Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.594847256Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.597468587Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.600112992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.604104722Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.606378575Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.609280446Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.612611026Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.615486208Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.617996743Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.62135857Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.623749969Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.626119869Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.629072393Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.631622386Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.634444986Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.637866426Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.640386881Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.642773267Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.645568251Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.647751062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.649958451Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.65272079Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.65497391Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.657063103Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.660080421Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.663605268Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.668032651Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.671451005Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:44.676534152Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:44.678646942Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:44.6813503Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:44.683215061Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":57,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:46.891200451Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:46.894898681Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:46.898137733Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:46.901076021Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:46.903435707Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:46.906426899Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:46.909338047Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:46.912734875Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:46.915171405Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:46.916447375Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:46.918800709Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:46.921500425Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:46.925796244Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:46.928863702Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.938853767Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.942272944Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.947914318Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.952573175Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.95643978Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.96018431Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.965293266Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.968809811Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.972494984Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.977137504Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.983381492Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.986803816Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.990370257Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.993992696Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:46.997466689Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.000816135Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.00519277Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.008895589Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.012549798Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.016215269Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.019369913Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.022562268Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.040693471Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.044134738Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.047473643Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.051603277Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.056761755Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.060570644Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.064795797Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.068702012Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.076601747Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.080723987Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.084486871Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.088209608Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.092634699Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.096363092Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.100074689Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.10436466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.107694486Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.112719802Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.116684761Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.120256072Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.123948956Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.128238101Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.131952024Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.135594108Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.140477818Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.144253578Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.147957377Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.152367652Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.155712319Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.158940741Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.163009602Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.166265202Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.16950916Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.173559008Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.177091736Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.180308026Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.183724229Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.18753108Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.190943847Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.193528586Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.19809156Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.201637149Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.205570504Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.210009694Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.213376076Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.216767664Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.221550255Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.225218318Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.228829351Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.233739979Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.239142772Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.242878441Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.247431256Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.251187846Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.254928657Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.259199466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.262755359Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.266791185Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.271218994Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.275049926Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.278795489Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.283200428Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.286924502Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.290614581Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.29394298Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.296246372Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.298429983Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.30062517Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.30354757Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.305176812Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.309096638Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:47.310446209Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:47.312248785Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:47.314237751Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":57,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:47.135095895Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:47.139985103Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:47.142373268Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:47.144816285Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:47.146113211Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:47.148059611Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:47.150809964Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:47.153555887Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:47.155623958Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:47.157287431Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:47.15873923Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:47.160667812Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:47.168478045Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:47.171723445Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.176027794Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.178659197Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.183300072Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.186087633Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.189413812Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.192294412Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.195968035Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.19965336Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.210036594Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.213498828Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.216269735Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.219205113Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.222701092Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.225688836Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.230681091Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.234203009Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.23681419Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.239711257Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.249049503Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.251856085Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.254665313Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.257371683Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.260866081Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.264193019Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.271519142Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.273382655Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.276562466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.278490165Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.280312004Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.282175608Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.285738573Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.28776099Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.289976982Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.293771151Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.296688992Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.298672777Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.301813937Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.304476081Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.3070922Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.312483826Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.315393621Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.318506895Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.32245018Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.325264511Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.337225197Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.340873424Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.343793598Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.347386461Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.351010644Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.353352922Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.356273929Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.360296979Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.363287549Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.366833422Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.370454404Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.37316451Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.375967023Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.379718775Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.382778691Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.3856285Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.389225051Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.392035738Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.39414534Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.39791144Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.401210104Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.404302364Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.408207828Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.411660985Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.414554854Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.418505381Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.421953758Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.425071732Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.428806285Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.432271708Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.435332894Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.438604846Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.442593659Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.445736823Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.448798062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.452727787Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.455720586Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.458829048Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.462682369Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.465807118Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.4691702Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.473058501Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.476164956Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.479485702Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.482084645Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.484822845Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.488917179Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.491098556Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.495958268Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:47.497809336Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:47.500460659Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:47.502974047Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":57,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:47.233951514Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:47.236507414Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:47.238880551Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:47.257108573Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:47.258278688Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:47.261319243Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:47.264019436Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:47.266661272Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:47.269115678Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:47.27154737Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:47.274573829Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:47.276027587Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:47.280012451Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:47.285406884Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.28990673Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.292790869Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.298096655Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.301121972Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.304088284Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.308575378Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.311647907Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.314009174Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.316366062Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.318752261Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.320880157Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.323475966Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.325761856Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.328849037Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.331697915Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.333947658Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.337606759Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.341091829Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.343133815Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.344816036Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.347499089Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.349519513Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.351932342Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.370825064Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.374380999Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.377255858Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.386021562Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.389145504Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.392309466Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.396437626Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.399641322Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.40688421Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.410637582Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.413469255Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.416506969Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.420528368Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.42378918Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.426864028Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.431628718Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.436295841Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.439513744Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.455964653Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.45916165Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.466533482Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.470522171Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.473496752Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.47651359Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.480647825Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.483545368Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.486660056Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.490846851Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.493968833Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.49709302Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.500875055Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.503091582Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.505898681Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.508613845Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.511437054Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.515005659Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.518812926Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.528798109Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.531961635Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.535974285Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.539067981Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.542066761Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.546036995Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.548938359Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.552221727Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.55563525Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.558424123Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.561819085Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.565727084Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.568730016Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.571767601Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.575073652Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.577916859Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.581263215Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.584919095Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.587910337Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.590765009Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.593055045Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.595908644Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.598622368Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.601827173Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.604508822Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.607192014Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.61049143Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.6131835Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.616101182Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.619360312Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.623457159Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.626159083Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.631171201Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:47.632659844Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:47.635148663Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:47.637729288Z 72 PC: 12dcd | Allocate memory

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":57,"TimeBased":true,"OriginalID":1443,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:43:47.291927514Z 42 PC: 1ffe5 | Get date 0x1ffe5: cmp dh, 8
0x1ffe8: jne 0x20007
0x1ffea: cmp dl, 0x12
0x1ffed: je 0x1fff3
0x1ffef: jg 0x1fff3
0x1fff1: jmp 0x20007
0x1fff3: mov dl, 2
0x1fff5: mov ah, 5
0x1fff7: mov dh, 0x80
0x1fff9: mov ch, 0
0x1fffb: int 0x13
0x1fffd: mov dl, 2
0x1ffff: mov ah, 5
0x20001: mov dh, 0x80
0x20003: mov ch, 0xa
0x20005: int 0x13
0x20007: mov ah, 0x2c
0x20009: int 0x21
0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
2018-12-25T11:43:47.294641422Z 44 PC: 2000b | Get time 0x2000b: cmp cl, 0xd
0x2000e: jae 0x20013
0x20010: jmp 0x20176
0x20013: cmp cl, 0x14
0x20016: jbe 0x2001b
0x20018: jmp 0x20176
0x2001b: mov ah, 0x1a
0x2001d: mov dx, 0x3a6
0x20020: add dx, bp
0x20022: int 0x21
0x20024: mov ah, 0x47
0x20026: mov si, word ptr [bp + 0x366]
0x2002a: mov dl, 0
0x2002c: int 0x21
0x2002e: mov ah, 0x3b
0x20030: mov dx, 0x326
0x20033: add dx, bp
0x20035: int 0x21
0x20037: mov ah, 0x4e
0x20039: mov cx, 4
2018-12-25T11:43:47.296967584Z 44 PC: 2017a | Get time 0x2017a: cmp dh, 0x38
0x2017d: jae 0x20181
0x2017f: jmp 0x2018e
0x20181: mov al, 0x36
0x20183: out 0x43, al
0x20185: mov ax, 0x900
0x20188: out 0x40, al
0x2018a: mov al, ah
0x2018c: out 0x40, al
0x2018e: pop es
0x2018f: pop ds
0x20190: popaw
0x20191: popf
0x20192: push 0x100
0x20195: ret
0x20196: push si
0x20197: xor byte ptr [si], 0xdb
0x2019a: inc si
0x2019b: loop 0x20197
0x2019d: pop dx
2018-12-25T11:43:47.29956495Z 80 PC: 13fb9 | Set current PSP
2018-12-25T11:43:47.301785921Z 48 PC: 13fbe | Get DOS version
2018-12-25T11:43:47.303429519Z 101 PC: 14044 | Get extended country info
2018-12-25T11:43:47.305314467Z 99 PC: 1404a | Get DBCS lead byte table pointer
2018-12-25T11:43:47.308112127Z 74 PC: 140ac | Reallocate memory
2018-12-25T11:43:47.30964586Z 25 PC: 140e3 | Get default drive
2018-12-25T11:43:47.311898378Z 37 PC: 13ba3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:43:47.319267026Z 37 PC: 13baa | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:43:47.320460736Z 37 PC: 13bb1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:43:47.324617978Z 2 PC: 13e6c | Character output (Char = '0d')
2018-12-25T11:43:47.328559972Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.333431796Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.336533383Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.342322318Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.3454954Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.348127643Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.352566401Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.355795714Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.358708627Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.362108879Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.364439355Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.367505988Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.369917726Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.373150803Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.375111806Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.380729131Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.383716874Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.386544465Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.389638891Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.393278932Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.396080958Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.39846176Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.402310963Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.40532631Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.408594987Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.411853782Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.415475647Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.41980465Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.430673044Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.432792533Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.434677923Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.436859117Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.440140839Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.441608576Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.444324508Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.446937818Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.45573351Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.45789078Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.460145767Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.462132575Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.465301655Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.467313198Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.469890655Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.473354186Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.475481Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.478556056Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.481450944Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.484566086Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.487592376Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.491204632Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.493958662Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.496884288Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.499647474Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.503586623Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.506629003Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.514867754Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.517923921Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.520945673Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.524156176Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.526132121Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.528823263Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.532072308Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.535347067Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.538427654Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.542016446Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.545236636Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.548162175Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.55187206Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.554949864Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.557956528Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.561507548Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.565223421Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.568182632Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.571503667Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.574514847Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.581876616Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.585076684Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.588095315Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.590594684Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.594107766Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.597638706Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.600521762Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.603807729Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.60651192Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.609195877Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.612448617Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.615155386Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.619121189Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.622569283Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.625267448Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.628342403Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.633081682Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.636121299Z 2 PC: 13e6c | Character output (See above)
2018-12-25T11:43:47.641016429Z 74 PC: 12d4c | Reallocate memory
2018-12-25T11:43:47.644193636Z 72 PC: 12d8d | Allocate memory
2018-12-25T11:43:47.646509912Z 72 PC: 12dc5 | Allocate memory
2018-12-25T11:43:47.651255176Z 72 PC: 12dcd | Allocate memory