Sample viewer

vx.netlux.org/Virus.DOS.ShitMan.441

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:07:54.694193932Z 53 PC: 90148 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:07:54.701985597Z 37 PC: 9015b | Set interrupt vector (Interrupt = '111' AKA 'UNKNOWN!')
2018-12-17T23:07:54.703328282Z 37 PC: 90165 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:07:54.707021176Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:07:54.709247204Z 72 PC: 12174 | Allocate memory
2018-12-17T23:07:54.711893197Z 72 PC: 1218d | Allocate memory
2018-12-17T23:07:54.713897862Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:07:54.71561965Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:07:54.7178319Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:07:54.7193263Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.721820827Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.724763003Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.729053545Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.731199537Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.73655753Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.738762568Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.741873348Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.745257307Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.748011816Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.75022746Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.753291883Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.756467737Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.759713647Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.762047499Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.774257558Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.776200865Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.779163092Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.782120919Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.785214398Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.787098196Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.790730258Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.799759157Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.802530869Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.805167121Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.809334557Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.811510758Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.817954803Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.819866803Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:07:54.822525666Z 62 PC: 122ab | Close file
2018-12-17T23:07:54.826219686Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T23:07:54.828918593Z 56 PC: 94df9 | Get or set country info
2018-12-17T23:07:54.831109053Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:07:54.836231926Z 25 PC: 94e62 | Get default drive
2018-12-17T23:07:54.838842839Z 71 PC: 970dd | Get current directory
2018-12-17T23:07:54.843270841Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:07:54.846890202Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T23:07:54.850448129Z 93 PC: 94f20 | File sharing functions
2018-12-17T23:07:54.85314596Z 93 PC: 94f27 | File sharing functions
2018-12-17T23:07:54.855542737Z 10 PC: 94f39 | Buffered keyboard input
2018-12-17T23:08:09.683429752Z 0 PC: 0 | Program terminate
2018-12-17T23:08:11.039895773Z 0 PC: 0 | Program terminate
2018-12-17T23:08:11.143728353Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:08:11.150256116Z 41 PC: 94fae | Parse filename
2018-12-17T23:08:11.152595272Z 41 PC: 9502f | Parse filename
2018-12-17T23:08:11.154943064Z 41 PC: 9504c | Parse filename
2018-12-17T23:08:11.162404789Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T23:08:11.164818578Z 71 PC: 986f3 | Get current directory
2018-12-17T23:08:11.1743693Z 78 PC: 986fe | Find first file
2018-12-17T23:08:11.185950477Z 71 PC: 9856c | Get current directory
2018-12-17T23:08:11.189446922Z 73 PC: 97c09 | Release memory
2018-12-17T23:08:11.191262003Z 61 PC: 901e6 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T23:08:11.199435999Z 63 PC: 901fd | Read file or device (Read 4 bytes on handle 5)
2018-12-17T23:08:11.207540679Z 66 PC: 90217 | Move file pointer
2018-12-17T23:08:11.209282912Z 66 PC: 90220 | Move file pointer
2018-12-17T23:08:11.211962655Z 63 PC: 90230 | Read file or device (Read 27 bytes on handle 5)
2018-12-17T23:08:11.215252082Z 66 PC: 90239 | Move file pointer
2018-12-17T23:08:11.216866346Z 64 PC: 90248 | Write file or device (Write 468 bytes on handle 5)
2018-12-17T23:08:11.221283242Z 62 PC: 9024c | Close file
2018-12-17T23:08:11.237863186Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.24109597Z 75 PC: 11821 | Execute program
2018-12-17T23:08:11.25588556Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T23:08:11.261086457Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-17T23:08:11.265253203Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:08:11.26728027Z 72 PC: 12174 | Allocate memory
2018-12-17T23:08:11.271015039Z 72 PC: 1218d | Allocate memory
2018-12-17T23:08:11.2734313Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:08:11.275338356Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:08:11.278205626Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:08:11.280211274Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.283175973Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.286021523Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.288833797Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.291838525Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.296427714Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.298961399Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.301872131Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.304349285Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.307757371Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.309908462Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.312744772Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.315410927Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.318220875Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.32036232Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.324231311Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.326419247Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.329297391Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.332344423Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.335529809Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.337688805Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.341442921Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.343876794Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.347030384Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.349211587Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.352653827Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.354940527Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.357908283Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.360530245Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-17T23:08:11.363294373Z 62 PC: 122ab | Close file
2018-12-17T23:08:11.366960118Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T23:08:11.369641292Z 56 PC: 94df9 | Get or set country info
2018-12-17T23:08:11.373026383Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:08:11.378493953Z 25 PC: 94e62 | Get default drive
2018-12-17T23:08:11.381584338Z 71 PC: 970dd | Get current directory
2018-12-17T23:08:11.386615058Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:08:11.390652443Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T23:08:11.394332562Z 93 PC: 94f20 | File sharing functions
2018-12-17T23:08:11.396710419Z 93 PC: 94f27 | File sharing functions
2018-12-17T23:08:11.39899585Z 10 PC: 94f39 | Buffered keyboard input

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":16017,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:45:02.596000246Z 53 PC: 90148 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:45:02.597295071Z 37 PC: 9015b | Set interrupt vector (Interrupt = '111' AKA 'UNKNOWN!')
2018-12-25T12:45:02.598095421Z 37 PC: 90165 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:45:02.60146014Z 77 PC: 11fe0 | Get program return code
2018-12-25T12:45:02.603351619Z 72 PC: 12174 | Allocate memory
2018-12-25T12:45:02.605043962Z 72 PC: 1218d | Allocate memory
2018-12-25T12:45:02.606716298Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:45:02.608928155Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:45:02.610570491Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:45:02.611690491Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-25T12:45:02.61370824Z 62 PC: 122ab | Close file
2018-12-25T12:45:02.615723419Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.617385744Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.618742108Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.620772265Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.622205516Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.623728704Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.625445476Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.626974292Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.628074258Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.630228717Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.63148863Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.633001965Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.634788019Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.637153239Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.638291301Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.640124124Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.641251079Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.643393611Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.644999154Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.64640321Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.647332942Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.64909356Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.650161077Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.652312574Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.65784415Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.659988082Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.661451283Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.664100768Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.667297906Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-25T12:45:02.668569845Z 56 PC: 94df9 | Get or set country info
2018-12-25T12:45:02.670546284Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T12:45:02.675703527Z 25 PC: 94e62 | Get default drive
2018-12-25T12:45:02.677163957Z 71 PC: 970dd | Get current directory
2018-12-25T12:45:02.681313965Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:02.684763028Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-25T12:45:02.687500969Z 93 PC: 94f20 | File sharing functions
2018-12-25T12:45:02.68900044Z 93 PC: 94f27 | File sharing functions
2018-12-25T12:45:02.691071195Z 10 PC: 94f39 | Buffered keyboard input
2018-12-25T12:45:17.607100608Z 0 PC: 0 | Program terminate
2018-12-25T12:45:18.962091185Z 0 PC: 0 | Program terminate (See above)
2018-12-25T12:45:19.063842818Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.067703014Z 41 PC: 94fae | Parse filename
2018-12-25T12:45:19.069790119Z 41 PC: 9502f | Parse filename
2018-12-25T12:45:19.070994126Z 41 PC: 9504c | Parse filename
2018-12-25T12:45:19.072516858Z 26 PC: 984f7 | Set disk transfer address
2018-12-25T12:45:19.074538001Z 71 PC: 986f3 | Get current directory
2018-12-25T12:45:19.080194862Z 78 PC: 986fe | Find first file
2018-12-25T12:45:19.089185557Z 71 PC: 9856c | Get current directory
2018-12-25T12:45:19.092585408Z 73 PC: 97c09 | Release memory
2018-12-25T12:45:19.094150522Z 61 PC: 901e6 | Open file (Filename = 'A:\PRINT.COM')
2018-12-25T12:45:19.100430943Z 63 PC: 901fd | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:45:19.106976248Z 66 PC: 90217 | Move file pointer
2018-12-25T12:45:19.108250751Z 66 PC: 90220 | Move file pointer
2018-12-25T12:45:19.109443717Z 63 PC: 90230 | Read file or device (Read 27 bytes on handle 5)
2018-12-25T12:45:19.112237639Z 66 PC: 90239 | Move file pointer
2018-12-25T12:45:19.113915857Z 64 PC: 90248 | Write file or device (Write 468 bytes on handle 5)
2018-12-25T12:45:19.116756845Z 62 PC: 9024c | Close file
2018-12-25T12:45:19.130554349Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.13268135Z 75 PC: 11821 | Execute program
2018-12-25T12:45:19.143015533Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-25T12:45:19.147241644Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-25T12:45:19.150379313Z 77 PC: 11fe0 | Get program return code (See above)
2018-12-25T12:45:19.151769801Z 72 PC: 12174 | Allocate memory (See above)
2018-12-25T12:45:19.154274435Z 72 PC: 1218d | Allocate memory (See above)
2018-12-25T12:45:19.155875164Z 37 PC: 123c4 | Set interrupt vector (See above)
2018-12-25T12:45:19.156924891Z 37 PC: 123cb | Set interrupt vector (See above)
2018-12-25T12:45:19.158564439Z 37 PC: 123d2 | Set interrupt vector (See above)
2018-12-25T12:45:19.160293047Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.162603583Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.164749045Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.16706332Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.168759487Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.171899523Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.173337093Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.17537982Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.17762177Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.179740829Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.181188883Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.184200424Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.1856428Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.187690354Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.189977827Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.192100798Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.193526632Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.196247061Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.197831726Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.199890448Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.201520522Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.205051701Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.206677988Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.209042586Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.211696979Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.213968119Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.215655241Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.218895717Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.220584639Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.222890001Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.227615977Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer (See above)
2018-12-25T12:45:19.228806157Z 56 PC: 94df9 | Get or set country info (See above)
2018-12-25T12:45:19.230505718Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.237291527Z 25 PC: 94e62 | Get default drive (See above)
2018-12-25T12:45:19.238815692Z 71 PC: 970dd | Get current directory (See above)
2018-12-25T12:45:19.242541861Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.247173766Z 2 PC: 970b2 | Character output (See above)
2018-12-25T12:45:19.249096897Z 93 PC: 94f20 | File sharing functions (See above)
2018-12-25T12:45:19.250587444Z 93 PC: 94f27 | File sharing functions (See above)
2018-12-25T12:45:19.252728318Z 10 PC: 94f39 | Buffered keyboard input (See above)

{"DateBased":true,"Day":3,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":16017,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:45:02.821092101Z 53 PC: 90148 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:45:02.82314419Z 37 PC: 9015b | Set interrupt vector (Interrupt = '111' AKA 'UNKNOWN!')
2018-12-25T12:45:02.824233919Z 37 PC: 90165 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:45:02.827330773Z 77 PC: 11fe0 | Get program return code
2018-12-25T12:45:02.830139522Z 72 PC: 12174 | Allocate memory
2018-12-25T12:45:02.83297059Z 72 PC: 1218d | Allocate memory
2018-12-25T12:45:02.834896948Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:45:02.836654881Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:45:02.838984324Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:45:02.840524661Z 42 PC: 90250 | Get date 0x90250: cmp al, 4
0x90252: jl 0x90268
0x90254: xor ax, ax
0x90256: mov ds, ax
0x90258: mov dx, 0x273
0x9025b: cmp word ptr [0x70], dx
0x9025f: je 0x90268
0x90261: push cs
0x90262: pop ds
0x90263: mov ax, 0x251c
0x90266: int 0x6f
0x90268: pop bp
0x90269: pop es
0x9026a: pop ds
0x9026b: pop dx
0x9026c: pop cx
0x9026d: pop bx
0x9026e: pop ax
0x9026f: popf
0x90270: jmp 0x90194
2018-12-25T12:45:02.843090894Z 37 PC: 90268 | Set interrupt vector (Interrupt = '28' AKA 'Get allocation info for specified drive')
2018-12-25T12:45:02.845255465Z 62 PC: 122ab | Close file
2018-12-25T12:45:02.847170567Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.849785986Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.852789237Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.857132392Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.859749026Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.876396837Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.878793108Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.880882411Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.88282608Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.885311023Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.887158435Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.893748137Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.895446496Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.89771799Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.900547291Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.902813976Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.904444763Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.906896333Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.909188751Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.911289696Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.913510733Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.915630367Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.917492367Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.919583741Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.934771516Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.937140077Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.938878258Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:02.948199892Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:02.95140115Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-25T12:45:02.952932245Z 56 PC: 94df9 | Get or set country info
2018-12-25T12:45:02.955541067Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T12:45:02.961570425Z 25 PC: 94e62 | Get default drive
2018-12-25T12:45:02.963286114Z 71 PC: 970dd | Get current directory
2018-12-25T12:45:02.968078431Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:02.971408095Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-25T12:45:02.973750289Z 93 PC: 94f20 | File sharing functions
2018-12-25T12:45:02.976291441Z 93 PC: 94f27 | File sharing functions
2018-12-25T12:45:02.978016914Z 10 PC: 94f39 | Buffered keyboard input
2018-12-25T12:45:17.801304931Z 0 PC: 0 | Program terminate
2018-12-25T12:45:19.155359474Z 0 PC: 0 | Program terminate (See above)
2018-12-25T12:45:19.257336403Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.261558292Z 41 PC: 94fae | Parse filename
2018-12-25T12:45:19.262964585Z 41 PC: 9502f | Parse filename
2018-12-25T12:45:19.264101517Z 41 PC: 9504c | Parse filename
2018-12-25T12:45:19.266172282Z 26 PC: 984f7 | Set disk transfer address
2018-12-25T12:45:19.267459684Z 71 PC: 986f3 | Get current directory
2018-12-25T12:45:19.272894679Z 78 PC: 986fe | Find first file
2018-12-25T12:45:19.27904757Z 71 PC: 9856c | Get current directory
2018-12-25T12:45:19.281341241Z 73 PC: 97c09 | Release memory
2018-12-25T12:45:19.282437925Z 61 PC: 901e6 | Open file (Filename = 'A:\PRINT.COM')
2018-12-25T12:45:19.287597701Z 63 PC: 901fd | Read file or device (Read 4 bytes on handle 5)
2018-12-25T12:45:19.291583758Z 66 PC: 90217 | Move file pointer
2018-12-25T12:45:19.292720709Z 66 PC: 90220 | Move file pointer
2018-12-25T12:45:19.294346089Z 63 PC: 90230 | Read file or device (Read 27 bytes on handle 5)
2018-12-25T12:45:19.296563138Z 66 PC: 90239 | Move file pointer
2018-12-25T12:45:19.297733834Z 64 PC: 90248 | Write file or device (Write 468 bytes on handle 5)
2018-12-25T12:45:19.300180218Z 62 PC: 9024c | Close file
2018-12-25T12:45:19.311844978Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.313386737Z 75 PC: 11821 | Execute program
2018-12-25T12:45:19.320321374Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-25T12:45:19.324078329Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-25T12:45:19.326913273Z 77 PC: 11fe0 | Get program return code (See above)
2018-12-25T12:45:19.328436181Z 72 PC: 12174 | Allocate memory (See above)
2018-12-25T12:45:19.329998346Z 72 PC: 1218d | Allocate memory (See above)
2018-12-25T12:45:19.33145611Z 37 PC: 123c4 | Set interrupt vector (See above)
2018-12-25T12:45:19.332917584Z 37 PC: 123cb | Set interrupt vector (See above)
2018-12-25T12:45:19.33387934Z 37 PC: 123d2 | Set interrupt vector (See above)
2018-12-25T12:45:19.33495801Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.337413655Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.349848882Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.351926906Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.353861491Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.355846086Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.357229576Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.359749799Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.362253127Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.364245803Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.366171725Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.368213591Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.369902013Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.372413556Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.373800229Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.375761604Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.377806672Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.379861624Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.381129215Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.383918563Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.385566444Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.387677361Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.389631144Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.391915404Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.393369327Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.395901141Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.397238837Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.399337331Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.401327182Z 42 PC: 90250 | Get date (See above)
2018-12-25T12:45:19.403297072Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:45:19.405963401Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer (See above)
2018-12-25T12:45:19.407700572Z 56 PC: 94df9 | Get or set country info (See above)
2018-12-25T12:45:19.409402557Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.413687543Z 25 PC: 94e62 | Get default drive (See above)
2018-12-25T12:45:19.415883552Z 71 PC: 970dd | Get current directory (See above)
2018-12-25T12:45:19.419622338Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:45:19.423962008Z 2 PC: 970b2 | Character output (See above)
2018-12-25T12:45:19.426559877Z 93 PC: 94f20 | File sharing functions (See above)
2018-12-25T12:45:19.428306428Z 93 PC: 94f27 | File sharing functions (See above)
2018-12-25T12:45:19.429887122Z 10 PC: 94f39 | Buffered keyboard input (See above)