Sample viewer

vx.netlux.org/Virus.DOS.IVP.Gift.465

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:05:16.436344574Z 26 PC: 14b9e | Set disk transfer address
2018-12-17T23:05:16.439776868Z 53 PC: 14a47 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:16.456700002Z 37 PC: 14a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:16.459801444Z 71 PC: 14a6d | Get current directory
2018-12-17T23:05:16.466598977Z 78 PC: 14ab5 | Find first file
2018-12-17T23:05:16.477880461Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:16.487474302Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.49670512Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.500189963Z 67 PC: 14bb2 | Get or set file attributes
2018-12-17T23:05:16.518591588Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-17T23:05:16.525891495Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:05:16.529960336Z 66 PC: 14b99 | Move file pointer
2018-12-17T23:05:16.532121179Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-17T23:05:16.542004275Z 87 PC: 14b5d | Get or set file date and time
2018-12-17T23:05:16.54423545Z 62 PC: 14b67 | Close file
2018-12-17T23:05:16.553893391Z 67 PC: 14bb2 | Get or set file attributes
2018-12-17T23:05:16.565097661Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.568400703Z 61 PC: 14ba7 | Open file (Filename = 'PRINT.COM')
2018-12-17T23:05:16.582320458Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.589605227Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.591944236Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.596063832Z 61 PC: 14ba7 | Open file (Filename = 'HELLO.COM')
2018-12-17T23:05:16.60516153Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.613055404Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.616365519Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.620127784Z 61 PC: 14ba7 | Open file (Filename = 'PHANG.COM')
2018-12-17T23:05:16.627677621Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.635899552Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.639309484Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.642916878Z 61 PC: 14ba7 | Open file (Filename = 'PRINTA~1.COM')
2018-12-17T23:05:16.650778021Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.659512526Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.662016524Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.66541769Z 61 PC: 14ba7 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:16.673657586Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.681527084Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.684665275Z 67 PC: 14bb2 | Get or set file attributes
2018-12-17T23:05:16.700113035Z 61 PC: 14ba7 | Open file (Filename = 'MANDEL.COM')
2018-12-17T23:05:16.708612628Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-17T23:05:16.721353496Z 66 PC: 14b99 | Move file pointer
2018-12-17T23:05:16.723791441Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-17T23:05:16.736823287Z 87 PC: 14b5d | Get or set file date and time
2018-12-17T23:05:16.739233299Z 62 PC: 14b67 | Close file
2018-12-17T23:05:16.754976905Z 67 PC: 14bb2 | Get or set file attributes
2018-12-17T23:05:16.767216671Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.770740808Z 61 PC: 14ba7 | Open file (Filename = 'PAH.COM')
2018-12-17T23:05:16.778415871Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.786718324Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.789239364Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.792499895Z 61 PC: 14ba7 | Open file (Filename = 'TEST.COM')
2018-12-17T23:05:16.800423205Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T23:05:16.803484793Z 62 PC: 14ad4 | Close file
2018-12-17T23:05:16.805803583Z 79 PC: 14ab5 | Find next file
2018-12-17T23:05:16.81050817Z 59 PC: 14a84 | Change current directory
2018-12-17T23:05:16.815274893Z 42 PC: 14b76 | Get date 0x14b76: cmp cx, 0x7cc
0x14b7a: jb 0x14b90
0x14b7c: cmp dh, 0xa
0x14b7f: jb 0x14b90
0x14b81: cmp dl, 0x1b
0x14b84: jb 0x14b90
0x14b86: mov ah, 9
0x14b88: lea dx, word ptr [bp + 0x2a6]
0x14b8c: int 0x21
0x14b8e: int 0x19
0x14b90: ret
0x14b91: mov ah, 0x42
0x14b93: xor cx, cx
0x14b95: xor dx, dx
0x14b97: int 0x21
0x14b99: ret
0x14b9a: mov ah, 0x1a
0x14b9c: int 0x21
0x14b9e: ret
0x14b9f: mov ah, 0x3d
2018-12-17T23:05:16.818125965Z 37 PC: 14a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:05:16.821136766Z 59 PC: 14a9f | Change current directory
2018-12-17T23:05:16.82340409Z 26 PC: 14b9e | Set disk transfer address
2018-12-17T23:05:16.827931845Z 53 PC: 15432 | Get interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-17T23:05:16.83027423Z 37 PC: 15447 | Set interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-17T23:05:16.833979347Z 48 PC: 14f40 | Get DOS version
2018-12-17T23:05:16.835505687Z 53 PC: 14f63 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-17T23:05:16.837172722Z 9 PC: 152df | Display string (Could not find end pointer)
2018-12-17T23:05:16.849398412Z 9 PC: 152df | Display string (Could not find end pointer)
2018-12-17T23:05:16.85435392Z 53 PC: 1522f | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T23:05:16.855921288Z 37 PC: 1523f | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T23:05:16.858511098Z 53 PC: 1525c | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T23:05:16.860077544Z 37 PC: 1526c | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-17T23:05:16.861609194Z 53 PC: 15271 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-17T23:05:16.863766591Z 37 PC: 15284 | Set interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15144,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:42.773469587Z 26 PC: 14b9e | Set disk transfer address
2018-12-25T12:42:42.775306439Z 53 PC: 14a47 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:42.777253402Z 37 PC: 14a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:42.778858828Z 71 PC: 14a6d | Get current directory
2018-12-25T12:42:42.782973322Z 78 PC: 14ab5 | Find first file
2018-12-25T12:42:42.791150616Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:42.79898094Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:42:42.806457848Z 62 PC: 14ad4 | Close file
2018-12-25T12:42:42.809953449Z 67 PC: 14bb2 | Get or set file attributes
2018-12-25T12:42:42.831179305Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:42.839099041Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:42:42.84318153Z 66 PC: 14b99 | Move file pointer
2018-12-25T12:42:42.856900554Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-25T12:42:42.867600814Z 87 PC: 14b5d | Get or set file date and time
2018-12-25T12:42:42.87087363Z 62 PC: 14b67 | Close file
2018-12-25T12:42:42.879903734Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:42.892175574Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:42.896729194Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:42.904714609Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:42.912557084Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:42.915278468Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:42.920079168Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:42.928669182Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:42.938332145Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:42.94198408Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:42.945284062Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:42.958392603Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:42.967329698Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:42.970313624Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:42.973364865Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:42.981998974Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:42.989634868Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:42.992119126Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:42.995743622Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.004287555Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.011440418Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.014525824Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.224155861Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.231924023Z 64 PC: 14b37 | Write file or device (See above)
2018-12-25T12:42:43.235050863Z 66 PC: 14b99 | Move file pointer (See above)
2018-12-25T12:42:43.237450867Z 64 PC: 14b49 | Write file or device (See above)
2018-12-25T12:42:43.335885837Z 87 PC: 14b5d | Get or set file date and time (See above)
2018-12-25T12:42:43.3380552Z 62 PC: 14b67 | Close file (See above)
2018-12-25T12:42:43.347836643Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.359686797Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.362722157Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.371177663Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.379290311Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.381884261Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.386099644Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.394445216Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.397927267Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.400540033Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.404424509Z 59 PC: 14a84 | Change current directory
2018-12-25T12:42:43.409836602Z 42 PC: 14b76 | Get date 0x14b76: cmp cx, 0x7cc
0x14b7a: jb 0x14b90
0x14b7c: cmp dh, 0xa
0x14b7f: jb 0x14b90
0x14b81: cmp dl, 0x1b
0x14b84: jb 0x14b90
0x14b86: mov ah, 9
0x14b88: lea dx, word ptr [bp + 0x2a6]
0x14b8c: int 0x21
0x14b8e: int 0x19
0x14b90: ret
0x14b91: mov ah, 0x42
0x14b93: xor cx, cx
0x14b95: xor dx, dx
0x14b97: int 0x21
0x14b99: ret
0x14b9a: mov ah, 0x1a
0x14b9c: int 0x21
0x14b9e: ret
0x14b9f: mov ah, 0x3d
2018-12-25T12:42:43.412888248Z 37 PC: 14a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.415232121Z 59 PC: 14a9f | Change current directory
2018-12-25T12:42:43.417604209Z 26 PC: 14b9e | Set disk transfer address (See above)
2018-12-25T12:42:43.423504391Z 53 PC: 15432 | Get interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.429308086Z 37 PC: 15447 | Set interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.432700843Z 48 PC: 14f40 | Get DOS version
2018-12-25T12:42:43.434337702Z 53 PC: 14f63 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.43788358Z 9 PC: 152df | Display string (Could not find end pointer)
2018-12-25T12:42:43.451659895Z 9 PC: 152df | Display string (See above)
2018-12-25T12:42:43.458657553Z 53 PC: 1522f | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.461281054Z 37 PC: 1523f | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.463388654Z 53 PC: 1525c | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.465150887Z 37 PC: 1526c | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.466786851Z 53 PC: 15271 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.469628278Z 37 PC: 15284 | Set interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')

{"DateBased":true,"Day":1,"Month":1,"Year":1996,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15144,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:43.077009803Z 26 PC: 14b9e | Set disk transfer address
2018-12-25T12:42:43.078870123Z 53 PC: 14a47 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.0803309Z 37 PC: 14a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.081492171Z 71 PC: 14a6d | Get current directory
2018-12-25T12:42:43.085181208Z 78 PC: 14ab5 | Find first file
2018-12-25T12:42:43.09182165Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:43.113568976Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:42:43.120988612Z 62 PC: 14ad4 | Close file
2018-12-25T12:42:43.123343328Z 67 PC: 14bb2 | Get or set file attributes
2018-12-25T12:42:43.335704902Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.343627728Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:42:43.3485637Z 66 PC: 14b99 | Move file pointer
2018-12-25T12:42:43.350643088Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-25T12:42:43.358011873Z 87 PC: 14b5d | Get or set file date and time
2018-12-25T12:42:43.361405074Z 62 PC: 14b67 | Close file
2018-12-25T12:42:43.372064436Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.381930623Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.385972515Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.395461477Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.402391679Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.404947247Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.409313509Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.416342184Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.423012Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.426045083Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.428207017Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.435625331Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.442688096Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.444072498Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.446040387Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.456968621Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.463147091Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.464533972Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.467324767Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.471842725Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.478107124Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.481691214Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.493821408Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.501722741Z 64 PC: 14b37 | Write file or device (See above)
2018-12-25T12:42:43.505637013Z 66 PC: 14b99 | Move file pointer (See above)
2018-12-25T12:42:43.509021895Z 64 PC: 14b49 | Write file or device (See above)
2018-12-25T12:42:43.520137312Z 87 PC: 14b5d | Get or set file date and time (See above)
2018-12-25T12:42:43.530191744Z 62 PC: 14b67 | Close file (See above)
2018-12-25T12:42:43.832795552Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.860007639Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.86324442Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.874056258Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.886956552Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.889359932Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.893193992Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.900723685Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.912045416Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.915196001Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.917983423Z 59 PC: 14a84 | Change current directory
2018-12-25T12:42:43.92534602Z 42 PC: 14b76 | Get date 0x14b76: cmp cx, 0x7cc
0x14b7a: jb 0x14b90
0x14b7c: cmp dh, 0xa
0x14b7f: jb 0x14b90
0x14b81: cmp dl, 0x1b
0x14b84: jb 0x14b90
0x14b86: mov ah, 9
0x14b88: lea dx, word ptr [bp + 0x2a6]
0x14b8c: int 0x21
0x14b8e: int 0x19
0x14b90: ret
0x14b91: mov ah, 0x42
0x14b93: xor cx, cx
0x14b95: xor dx, dx
0x14b97: int 0x21
0x14b99: ret
0x14b9a: mov ah, 0x1a
0x14b9c: int 0x21
0x14b9e: ret
0x14b9f: mov ah, 0x3d
2018-12-25T12:42:43.929373862Z 37 PC: 14a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.93141898Z 59 PC: 14a9f | Change current directory
2018-12-25T12:42:43.93424478Z 26 PC: 14b9e | Set disk transfer address (See above)
2018-12-25T12:42:43.941830743Z 53 PC: 15432 | Get interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.943103908Z 37 PC: 15447 | Set interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.945479396Z 48 PC: 14f40 | Get DOS version
2018-12-25T12:42:43.946378689Z 53 PC: 14f63 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.949203052Z 9 PC: 152df | Display string (Could not find end pointer)
2018-12-25T12:42:43.956596789Z 9 PC: 152df | Display string (See above)
2018-12-25T12:42:43.960928636Z 53 PC: 1522f | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.96261966Z 37 PC: 1523f | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.963730299Z 53 PC: 1525c | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.964875907Z 37 PC: 1526c | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.966744455Z 53 PC: 15271 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.967789848Z 37 PC: 15284 | Set interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')

{"DateBased":true,"Day":1,"Month":10,"Year":1996,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15144,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:43.302687209Z 26 PC: 14b9e | Set disk transfer address
2018-12-25T12:42:43.304803924Z 53 PC: 14a47 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.306318572Z 37 PC: 14a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.307627914Z 71 PC: 14a6d | Get current directory
2018-12-25T12:42:43.311720704Z 78 PC: 14ab5 | Find first file
2018-12-25T12:42:43.318770341Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:43.326087329Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:42:43.333158254Z 62 PC: 14ad4 | Close file
2018-12-25T12:42:43.336084401Z 67 PC: 14bb2 | Get or set file attributes
2018-12-25T12:42:43.356001178Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.370070733Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:42:43.377551115Z 66 PC: 14b99 | Move file pointer
2018-12-25T12:42:43.38069907Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-25T12:42:43.389873397Z 87 PC: 14b5d | Get or set file date and time
2018-12-25T12:42:43.392918343Z 62 PC: 14b67 | Close file
2018-12-25T12:42:43.403034359Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.414576542Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.418668879Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.428225638Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.436144793Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.439563047Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.443040718Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.451284273Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.460093083Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.462463397Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.466729375Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.475337239Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.484058883Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.486484525Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.489856008Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.498200933Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.505937344Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.508031149Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.512178521Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.519757683Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.526959448Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.530008476Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.833151583Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.841259657Z 64 PC: 14b37 | Write file or device (See above)
2018-12-25T12:42:43.845770292Z 66 PC: 14b99 | Move file pointer (See above)
2018-12-25T12:42:43.848306741Z 64 PC: 14b49 | Write file or device (See above)
2018-12-25T12:42:43.860194486Z 87 PC: 14b5d | Get or set file date and time (See above)
2018-12-25T12:42:43.866985529Z 62 PC: 14b67 | Close file (See above)
2018-12-25T12:42:43.877171016Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.888534925Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.891501537Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.897916088Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.905121283Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.907261117Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.911064614Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.915422465Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.922502199Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.92521714Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.92921397Z 59 PC: 14a84 | Change current directory
2018-12-25T12:42:43.933918282Z 42 PC: 14b76 | Get date 0x14b76: cmp cx, 0x7cc
0x14b7a: jb 0x14b90
0x14b7c: cmp dh, 0xa
0x14b7f: jb 0x14b90
0x14b81: cmp dl, 0x1b
0x14b84: jb 0x14b90
0x14b86: mov ah, 9
0x14b88: lea dx, word ptr [bp + 0x2a6]
0x14b8c: int 0x21
0x14b8e: int 0x19
0x14b90: ret
0x14b91: mov ah, 0x42
0x14b93: xor cx, cx
0x14b95: xor dx, dx
0x14b97: int 0x21
0x14b99: ret
0x14b9a: mov ah, 0x1a
0x14b9c: int 0x21
0x14b9e: ret
0x14b9f: mov ah, 0x3d
2018-12-25T12:42:43.936941054Z 37 PC: 14a95 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.93814875Z 59 PC: 14a9f | Change current directory
2018-12-25T12:42:43.940030407Z 26 PC: 14b9e | Set disk transfer address (See above)
2018-12-25T12:42:43.94552926Z 53 PC: 15432 | Get interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.9469608Z 37 PC: 15447 | Set interrupt vector (Interrupt = '116' AKA 'UNKNOWN!')
2018-12-25T12:42:43.950175032Z 48 PC: 14f40 | Get DOS version
2018-12-25T12:42:43.951979733Z 53 PC: 14f63 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.953231386Z 9 PC: 152df | Display string (Could not find end pointer)
2018-12-25T12:42:43.960506148Z 9 PC: 152df | Display string (See above)
2018-12-25T12:42:43.964773279Z 53 PC: 1522f | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.966284738Z 37 PC: 1523f | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.968011675Z 53 PC: 1525c | Get interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.969227195Z 37 PC: 1526c | Set interrupt vector (Interrupt = '16' AKA 'Close file')
2018-12-25T12:42:43.970833506Z 53 PC: 15271 | Get interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')
2018-12-25T12:42:43.971998441Z 37 PC: 15284 | Set interrupt vector (Interrupt = '51' AKA 'Get or set Ctrl-Break')

{"DateBased":true,"Day":27,"Month":10,"Year":1996,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":15144,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:42:43.34108765Z 26 PC: 14b9e | Set disk transfer address
2018-12-25T12:42:43.351675611Z 53 PC: 14a47 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.352979596Z 37 PC: 14a5f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:43.354225076Z 71 PC: 14a6d | Get current directory
2018-12-25T12:42:43.358485426Z 78 PC: 14ab5 | Find first file
2018-12-25T12:42:43.365709945Z 61 PC: 14ba7 | Open file (Filename = 'SLEEP.COM')
2018-12-25T12:42:43.373661701Z 63 PC: 14ad0 | Read file or device (Read 26 bytes on handle 5)
2018-12-25T12:42:43.383094546Z 62 PC: 14ad4 | Close file
2018-12-25T12:42:43.386537525Z 67 PC: 14bb2 | Get or set file attributes
2018-12-25T12:42:43.403683992Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.417177668Z 64 PC: 14b37 | Write file or device (Write 5 bytes on handle 5)
2018-12-25T12:42:43.425423944Z 66 PC: 14b99 | Move file pointer
2018-12-25T12:42:43.427492312Z 64 PC: 14b49 | Write file or device (Write 465 bytes on handle 5)
2018-12-25T12:42:43.436779429Z 87 PC: 14b5d | Get or set file date and time
2018-12-25T12:42:43.450395283Z 62 PC: 14b67 | Close file
2018-12-25T12:42:43.462082937Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.47985318Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.48424313Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.517546696Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.524938078Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.529809474Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.532891845Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.540171373Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.547551323Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.554050575Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.557564043Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.565216381Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.573170778Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.575640797Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.578643356Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.586895621Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.594215232Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.596099989Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.599815003Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.607316636Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.614859341Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.618784391Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.83258078Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.840743546Z 64 PC: 14b37 | Write file or device (See above)
2018-12-25T12:42:43.844990022Z 66 PC: 14b99 | Move file pointer (See above)
2018-12-25T12:42:43.846543188Z 64 PC: 14b49 | Write file or device (See above)
2018-12-25T12:42:43.859029071Z 87 PC: 14b5d | Get or set file date and time (See above)
2018-12-25T12:42:43.861466765Z 62 PC: 14b67 | Close file (See above)
2018-12-25T12:42:43.870272487Z 67 PC: 14bb2 | Get or set file attributes (See above)
2018-12-25T12:42:43.882017488Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.886148839Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.90661966Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.915488968Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.919129801Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.922911161Z 61 PC: 14ba7 | Open file (See above)
2018-12-25T12:42:43.931443636Z 63 PC: 14ad0 | Read file or device (See above)
2018-12-25T12:42:43.938612263Z 62 PC: 14ad4 | Close file (See above)
2018-12-25T12:42:43.941454795Z 79 PC: 14ab5 | Find next file (See above)
2018-12-25T12:42:43.944486855Z 59 PC: 14a84 | Change current directory
2018-12-25T12:42:43.949279901Z 42 PC: 14b76 | Get date 0x14b76: cmp cx, 0x7cc
0x14b7a: jb 0x14b90
0x14b7c: cmp dh, 0xa
0x14b7f: jb 0x14b90
0x14b81: cmp dl, 0x1b
0x14b84: jb 0x14b90
0x14b86: mov ah, 9
0x14b88: lea dx, word ptr [bp + 0x2a6]
0x14b8c: int 0x21
0x14b8e: int 0x19
0x14b90: ret
0x14b91: mov ah, 0x42
0x14b93: xor cx, cx
0x14b95: xor dx, dx
0x14b97: int 0x21
0x14b99: ret
0x14b9a: mov ah, 0x1a
0x14b9c: int 0x21
0x14b9e: ret
0x14b9f: mov ah, 0x3d
2018-12-25T12:42:43.952674672Z 9 PC: 14b8e | Display string (String= 'A GifT FroM NecroLABS (C) 1996 ')
2018-12-25T12:42:46.043032615Z 72 PC: 8f1b9 | Allocate memory
2018-12-25T12:42:46.044325943Z 72 PC: 8f1bd | Allocate memory
2018-12-25T12:42:46.047389255Z 99 PC: 90858 | Get DBCS lead byte table pointer
2018-12-25T12:42:46.049468996Z 61 PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS')
2018-12-25T12:42:46.061399958Z 66 PC: 91f95 | Move file pointer
2018-12-25T12:42:46.063889396Z 62 PC: 91fc1 | Close file
2018-12-25T12:42:46.066227481Z 75 PC: 91fe0 | Execute program
2018-12-25T12:42:46.084665862Z 98 PC: 916f1 | Get current PSP
2018-12-25T12:42:46.086707098Z 9 PC: c605 | Display string (String= '6��r�&;] u')
2018-12-25T12:42:46.098213257Z 48 PC: c609 | Get DOS version
2018-12-25T12:42:46.102239783Z 9 PC: c382 | Display string (String= ' Installed A20 handler number ')
2018-12-25T12:42:46.108448847Z 2 PC: c38c | Character output (Char = '32')
2018-12-25T12:42:46.111596792Z 2 PC: c3a7 | Character output (Char = '2e')
2018-12-25T12:42:46.115768283Z 9 PC: c6d9 | Display string (String= '�����VH�VD���V@��������������_���Ku��t1��������D�����t �� ��������a1��Z�����W���� ������5���|�����(���������Nj�(��������p�^')
2018-12-25T12:42:46.122304901Z 9 PC: c6e0 | Display string (String= '�5���|�����(���������Nj�(��������p�^')
2018-12-25T12:42:46.133526986Z 61 PC: 91f88 | Open file (See above)
2018-12-25T12:42:46.14630282Z 66 PC: 91f95 | Move file pointer (See above)
2018-12-25T12:42:46.148358896Z 62 PC: 91fc1 | Close file (See above)
2018-12-25T12:42:46.152226028Z 75 PC: 91fe0 | Execute program (See above)
2018-12-25T12:42:46.176377976Z 98 PC: 916f1 | Get current PSP (See above)
2018-12-25T12:42:46.18107394Z 82 PC: 13d46 | Get DOS internal pointers (SYSVARS)
2018-12-25T12:42:46.184032504Z 53 PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:46.186237457Z 37 PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file')
2018-12-25T12:42:46.187992759Z 53 PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:42:46.190993514Z 37 PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:42:46.192989988Z 9 PC: 13a0d | Display string (Could not find end pointer)
2018-12-25T12:42:46.205163262Z 62 PC: 8f8eb | Close file
2018-12-25T12:42:46.207976808Z 62 PC: 8f8f2 | Close file
2018-12-25T12:42:46.211490506Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.213543137Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.215579722Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.218688111Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.220747641Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.222783777Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.227191829Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.232073672Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.233828994Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.236289197Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.238049999Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.239794733Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.241767026Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.243931985Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.246424214Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.248047724Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.249958234Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.251547039Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.253155437Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.256027374Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.258058433Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.259881184Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.262741643Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.264422895Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.266096689Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.268611617Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.270319309Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.272076311Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.274553971Z 62 PC: 8f8f2 | Close file (See above)
2018-12-25T12:42:46.276244769Z 61 PC: 8f8ff | Open file (Filename = '')
2018-12-25T12:42:46.281708304Z 62 PC: 8f90e | Close file
2018-12-25T12:42:46.284866271Z 69 PC: 8f915 | Duplicate handle
2018-12-25T12:42:46.287187758Z 69 PC: 8f919 | Duplicate handle
2018-12-25T12:42:46.289440215Z 61 PC: 9387b | Open file (Filename = '')
2018-12-25T12:42:46.295135596Z 68 PC: 9386b | I/O control for devices (Set for = '')
2018-12-25T12:42:46.298272117Z 61 PC: 9387b | Open file (See above)
2018-12-25T12:42:46.303963868Z 68 PC: 9386b | I/O control for devices (See above)
2018-12-25T12:42:46.306249079Z 74 PC: 8f9c4 | Reallocate memory
2018-12-25T12:42:46.309300797Z 72 PC: 8f9e0 | Allocate memory
2018-12-25T12:42:46.311549927Z 72 PC: 8f9e4 | Allocate memory
2018-12-25T12:42:46.313618835Z 74 PC: 8f9fb | Reallocate memory
2018-12-25T12:42:46.316354433Z 72 PC: 8fa02 | Allocate memory
2018-12-25T12:42:46.318383635Z 72 PC: 8fa06 | Allocate memory
2018-12-25T12:42:46.320005888Z 73 PC: 8fa11 | Release memory
2018-12-25T12:42:46.322347565Z 73 PC: 8efea | Release memory
2018-12-25T12:42:46.323729558Z 74 PC: 8f003 | Reallocate memory
2018-12-25T12:42:46.325357828Z 72 PC: 8f054 | Allocate memory
2018-12-25T12:42:46.327747399Z 72 PC: 8f058 | Allocate memory
2018-12-25T12:42:46.329470007Z 73 PC: 8f060 | Release memory
2018-12-25T12:42:46.33165224Z 61 PC: 8f080 | Open file (Filename = 'r,�S�������[�
2018-12-25T12:42:46.342060587Z 63 PC: 8f095 | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:42:46.348407554Z 66 PC: 8f0ad | Move file pointer
2018-12-25T12:42:46.350417501Z 62 PC: 8f0d1 | Close file
2018-12-25T12:42:46.353899376Z 75 PC: 8f0f2 | Execute program
2018-12-25T12:42:46.379724233Z 80 PC: 12be9 | Set current PSP
2018-12-25T12:42:46.380630599Z 48 PC: 12bee | Get DOS version
2018-12-25T12:42:46.382611733Z 99 PC: 193d0 | Get DBCS lead byte table pointer
2018-12-25T12:42:46.386612815Z 101 PC: 12c74 | Get extended country info
2018-12-25T12:42:46.388043183Z 99 PC: 12c7a | Get DBCS lead byte table pointer
2018-12-25T12:42:46.391987823Z 74 PC: 12cdc | Reallocate memory
2018-12-25T12:42:46.393724736Z 72 PC: 1355d | Allocate memory
2018-12-25T12:42:46.39577791Z 25 PC: 13596 | Get default drive
2018-12-25T12:42:46.397802254Z 71 PC: 135ad | Get current directory
2018-12-25T12:42:46.40121989Z 59 PC: 135ba | Change current directory
2018-12-25T12:42:46.406993684Z 59 PC: 135c8 | Change current directory
2018-12-25T12:42:46.413657408Z 59 PC: 135d3 | Change current directory
2018-12-25T12:42:46.417960232Z 25 PC: 12d13 | Get default drive
2018-12-25T12:42:46.419578579Z 37 PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:42:46.424374457Z 37 PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:42:46.426117089Z 37 PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:42:46.428957694Z 80 PC: 1301d | Set current PSP
2018-12-25T12:42:46.430534817Z 37 PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag')
2018-12-25T12:42:46.433274394Z 53 PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:42:46.435037257Z 37 PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address')
2018-12-25T12:42:46.436799103Z 51 PC: 13417 | Get or set Ctrl-Break
2018-12-25T12:42:46.440352177Z 72 PC: 130ec | Allocate memory
2018-12-25T12:42:46.442727781Z 61 PC: 131b2 | Open file (Filename = '')
2018-12-25T12:42:46.450264371Z 62 PC: 131ba | Close file
2018-12-25T12:42:46.453344555Z 51 PC: 1344c | Get or set Ctrl-Break
2018-12-25T12:42:46.454500316Z 74 PC: 1197c | Reallocate memory
2018-12-25T12:42:46.45585169Z 72 PC: 11991 | Allocate memory
2018-12-25T12:42:46.457886867Z 73 PC: 119b2 | Release memory
2018-12-25T12:42:46.45914132Z 72 PC: 119bd | Allocate memory
2018-12-25T12:42:46.460927715Z 73 PC: 119df | Release memory
2018-12-25T12:42:46.473302702Z 72 PC: 119f5 | Allocate memory
2018-12-25T12:42:46.475495049Z 72 PC: 119fd | Allocate memory