Sample viewer

vx.netlux.org/Virus.DOS.Pyramid.457

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:12:33.939091133Z 44 PC: 12e61 | Get time 0x12e61: cmp ch, 7
0x12e64: je 0x12e68
0x12e66: jmp 0x12ebf
0x12e68: mov ax, 3
0x12e6b: push bp
0x12e6c: mov cx, sp
0x12e6e: int 0x10
0x12e70: mov ah, 0xb
0x12e72: mov bx, 0xe
0x12e75: int 0x10
0x12e77: mov sp, cx
0x12e79: pop bp
0x12e7a: cld
0x12e7b: mov ax, 0xb800
0x12e7e: mov es, ax
0x12e80: xor di, di
0x12e82: mov cx, 0x550
0x12e85: mov ax, 0x1db
0x12e88: rep stosd dword ptr es:[di], eax
0x12e8a: mov cx, 0x280
2018-12-17T23:12:33.942536511Z 53 PC: 12ec4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:12:33.944008188Z 37 PC: 12eea | Set interrupt vector (Interrupt = '128' AKA 'UNKNOWN!')
2018-12-17T23:12:33.945229926Z 37 PC: 12eea | Set interrupt vector (Interrupt = '129' AKA 'UNKNOWN!')
2018-12-17T23:12:33.946459107Z 37 PC: 12eea | Set interrupt vector (Interrupt = '130' AKA 'UNKNOWN!')
2018-12-17T23:12:33.951589234Z 37 PC: 12eea | Set interrupt vector (Interrupt = '131' AKA 'UNKNOWN!')
2018-12-17T23:12:33.952795251Z 37 PC: 12eea | Set interrupt vector (Interrupt = '132' AKA 'UNKNOWN!')
2018-12-17T23:12:33.954029482Z 37 PC: 12eea | Set interrupt vector (Interrupt = '133' AKA 'UNKNOWN!')
2018-12-17T23:12:33.957721775Z 37 PC: 12eea | Set interrupt vector (Interrupt = '134' AKA 'UNKNOWN!')
2018-12-17T23:12:33.959095979Z 37 PC: 12eea | Set interrupt vector (Interrupt = '135' AKA 'UNKNOWN!')
2018-12-17T23:12:33.960455385Z 37 PC: 12eea | Set interrupt vector (Interrupt = '136' AKA 'UNKNOWN!')
2018-12-17T23:12:33.962954444Z 37 PC: 12eea | Set interrupt vector (Interrupt = '137' AKA 'UNKNOWN!')
2018-12-17T23:12:33.964272402Z 37 PC: 12eea | Set interrupt vector (Interrupt = '138' AKA 'UNKNOWN!')
2018-12-17T23:12:33.965647738Z 37 PC: 12eea | Set interrupt vector (Interrupt = '139' AKA 'UNKNOWN!')
2018-12-17T23:12:33.968801098Z 37 PC: 12eea | Set interrupt vector (Interrupt = '140' AKA 'UNKNOWN!')
2018-12-17T23:12:33.970432806Z 37 PC: 12eea | Set interrupt vector (Interrupt = '141' AKA 'UNKNOWN!')
2018-12-17T23:12:33.971736748Z 37 PC: 12eea | Set interrupt vector (Interrupt = '142' AKA 'UNKNOWN!')
2018-12-17T23:12:33.973043997Z 37 PC: 12eea | Set interrupt vector (Interrupt = '143' AKA 'UNKNOWN!')
2018-12-17T23:12:33.975866033Z 37 PC: 12eea | Set interrupt vector (Interrupt = '144' AKA 'UNKNOWN!')
2018-12-17T23:12:33.97743907Z 37 PC: 12eea | Set interrupt vector (Interrupt = '145' AKA 'UNKNOWN!')
2018-12-17T23:12:33.978968276Z 37 PC: 12eea | Set interrupt vector (Interrupt = '146' AKA 'UNKNOWN!')
2018-12-17T23:12:33.981024312Z 37 PC: 12eea | Set interrupt vector (Interrupt = '147' AKA 'UNKNOWN!')
2018-12-17T23:12:33.982641002Z 37 PC: 12eea | Set interrupt vector (Interrupt = '148' AKA 'UNKNOWN!')
2018-12-17T23:12:33.984206747Z 37 PC: 12eea | Set interrupt vector (Interrupt = '149' AKA 'UNKNOWN!')
2018-12-17T23:12:33.986684956Z 37 PC: 12eea | Set interrupt vector (Interrupt = '150' AKA 'UNKNOWN!')
2018-12-17T23:12:33.988278533Z 37 PC: 12eea | Set interrupt vector (Interrupt = '151' AKA 'UNKNOWN!')
2018-12-17T23:12:33.990154861Z 37 PC: 12eea | Set interrupt vector (Interrupt = '152' AKA 'UNKNOWN!')
2018-12-17T23:12:33.994758087Z 37 PC: 12eea | Set interrupt vector (Interrupt = '153' AKA 'UNKNOWN!')
2018-12-17T23:12:33.99618485Z 37 PC: 12eea | Set interrupt vector (Interrupt = '154' AKA 'UNKNOWN!')
2018-12-17T23:12:33.99768487Z 37 PC: 12eea | Set interrupt vector (Interrupt = '155' AKA 'UNKNOWN!')
2018-12-17T23:12:34.000313372Z 37 PC: 12eea | Set interrupt vector (Interrupt = '156' AKA 'UNKNOWN!')
2018-12-17T23:12:34.00167907Z 37 PC: 12eea | Set interrupt vector (Interrupt = '157' AKA 'UNKNOWN!')
2018-12-17T23:12:34.002921697Z 37 PC: 12eea | Set interrupt vector (Interrupt = '158' AKA 'UNKNOWN!')
2018-12-17T23:12:34.004860002Z 37 PC: 12eea | Set interrupt vector (Interrupt = '159' AKA 'UNKNOWN!')
2018-12-17T23:12:34.006159515Z 37 PC: 12eea | Set interrupt vector (Interrupt = '160' AKA 'UNKNOWN!')
2018-12-17T23:12:34.007411269Z 37 PC: 12eea | Set interrupt vector (Interrupt = '161' AKA 'UNKNOWN!')
2018-12-17T23:12:34.009271898Z 37 PC: 12eea | Set interrupt vector (Interrupt = '162' AKA 'UNKNOWN!')
2018-12-17T23:12:34.011674746Z 37 PC: 12eea | Set interrupt vector (Interrupt = '163' AKA 'UNKNOWN!')
2018-12-17T23:12:34.013082042Z 37 PC: 12eea | Set interrupt vector (Interrupt = '164' AKA 'UNKNOWN!')
2018-12-17T23:12:34.01480389Z 37 PC: 12eea | Set interrupt vector (Interrupt = '165' AKA 'UNKNOWN!')
2018-12-17T23:12:34.016503135Z 37 PC: 12eea | Set interrupt vector (Interrupt = '166' AKA 'UNKNOWN!')
2018-12-17T23:12:34.018008927Z 37 PC: 12eea | Set interrupt vector (Interrupt = '167' AKA 'UNKNOWN!')
2018-12-17T23:12:34.019464353Z 37 PC: 12eea | Set interrupt vector (Interrupt = '168' AKA 'UNKNOWN!')
2018-12-17T23:12:34.021235023Z 37 PC: 12eea | Set interrupt vector (Interrupt = '169' AKA 'UNKNOWN!')
2018-12-17T23:12:34.022560726Z 37 PC: 12eea | Set interrupt vector (Interrupt = '170' AKA 'UNKNOWN!')
2018-12-17T23:12:34.023879295Z 37 PC: 12eea | Set interrupt vector (Interrupt = '171' AKA 'UNKNOWN!')
2018-12-17T23:12:34.025991106Z 37 PC: 12eea | Set interrupt vector (Interrupt = '172' AKA 'UNKNOWN!')
2018-12-17T23:12:34.027178428Z 37 PC: 12eea | Set interrupt vector (Interrupt = '173' AKA 'UNKNOWN!')
2018-12-17T23:12:34.028293295Z 37 PC: 12eea | Set interrupt vector (Interrupt = '174' AKA 'UNKNOWN!')
2018-12-17T23:12:34.030277556Z 37 PC: 12eea | Set interrupt vector (Interrupt = '175' AKA 'UNKNOWN!')
2018-12-17T23:12:34.031754032Z 37 PC: 12eea | Set interrupt vector (Interrupt = '176' AKA 'UNKNOWN!')
2018-12-17T23:12:34.033323643Z 37 PC: 12eea | Set interrupt vector (Interrupt = '177' AKA 'UNKNOWN!')
2018-12-17T23:12:34.035809949Z 37 PC: 12eea | Set interrupt vector (Interrupt = '178' AKA 'UNKNOWN!')
2018-12-17T23:12:34.037350355Z 37 PC: 12eea | Set interrupt vector (Interrupt = '179' AKA 'UNKNOWN!')
2018-12-17T23:12:34.039273552Z 37 PC: 12eea | Set interrupt vector (Interrupt = '180' AKA 'UNKNOWN!')
2018-12-17T23:12:34.041897556Z 37 PC: 12eea | Set interrupt vector (Interrupt = '181' AKA 'UNKNOWN!')
2018-12-17T23:12:34.043120956Z 37 PC: 12eea | Set interrupt vector (Interrupt = '182' AKA 'UNKNOWN!')
2018-12-17T23:12:34.044286297Z 37 PC: 12eea | Set interrupt vector (Interrupt = '183' AKA 'UNKNOWN!')
2018-12-17T23:12:34.045412855Z 37 PC: 12eea | Set interrupt vector (Interrupt = '184' AKA 'UNKNOWN!')
2018-12-17T23:12:34.046984671Z 37 PC: 12eea | Set interrupt vector (Interrupt = '185' AKA 'UNKNOWN!')
2018-12-17T23:12:34.048307138Z 37 PC: 12eea | Set interrupt vector (Interrupt = '186' AKA 'UNKNOWN!')
2018-12-17T23:12:34.049599107Z 37 PC: 12eea | Set interrupt vector (Interrupt = '187' AKA 'UNKNOWN!')
2018-12-17T23:12:34.051968132Z 37 PC: 12eea | Set interrupt vector (Interrupt = '188' AKA 'UNKNOWN!')
2018-12-17T23:12:34.053473172Z 37 PC: 12eea | Set interrupt vector (Interrupt = '189' AKA 'UNKNOWN!')
2018-12-17T23:12:34.055016324Z 37 PC: 12eea | Set interrupt vector (Interrupt = '190' AKA 'UNKNOWN!')
2018-12-17T23:12:34.057765282Z 37 PC: 12eea | Set interrupt vector (Interrupt = '191' AKA 'UNKNOWN!')
2018-12-17T23:12:34.074307087Z 37 PC: 12eea | Set interrupt vector (Interrupt = '192' AKA 'UNKNOWN!')
2018-12-17T23:12:34.075986445Z 37 PC: 12eea | Set interrupt vector (Interrupt = '193' AKA 'UNKNOWN!')
2018-12-17T23:12:34.078569041Z 37 PC: 12eea | Set interrupt vector (Interrupt = '194' AKA 'UNKNOWN!')
2018-12-17T23:12:34.079693756Z 37 PC: 12eea | Set interrupt vector (Interrupt = '195' AKA 'UNKNOWN!')
2018-12-17T23:12:34.080900956Z 37 PC: 12eea | Set interrupt vector (Interrupt = '196' AKA 'UNKNOWN!')
2018-12-17T23:12:34.082726849Z 37 PC: 12eea | Set interrupt vector (Interrupt = '197' AKA 'UNKNOWN!')
2018-12-17T23:12:34.084737109Z 37 PC: 12eea | Set interrupt vector (Interrupt = '198' AKA 'UNKNOWN!')
2018-12-17T23:12:34.086615361Z 37 PC: 12eea | Set interrupt vector (Interrupt = '199' AKA 'UNKNOWN!')
2018-12-17T23:12:34.089465119Z 37 PC: 12eea | Set interrupt vector (Interrupt = '200' AKA 'UNKNOWN!')
2018-12-17T23:12:34.090816621Z 37 PC: 12eea | Set interrupt vector (Interrupt = '201' AKA 'UNKNOWN!')
2018-12-17T23:12:34.092064968Z 37 PC: 12eea | Set interrupt vector (Interrupt = '202' AKA 'UNKNOWN!')
2018-12-17T23:12:34.093290813Z 37 PC: 12eea | Set interrupt vector (Interrupt = '203' AKA 'UNKNOWN!')
2018-12-17T23:12:34.095314749Z 37 PC: 12eea | Set interrupt vector (Interrupt = '204' AKA 'UNKNOWN!')
2018-12-17T23:12:34.097109544Z 37 PC: 12eea | Set interrupt vector (Interrupt = '205' AKA 'UNKNOWN!')
2018-12-17T23:12:34.098958561Z 37 PC: 12eea | Set interrupt vector (Interrupt = '206' AKA 'UNKNOWN!')
2018-12-17T23:12:34.10160692Z 37 PC: 12eea | Set interrupt vector (Interrupt = '207' AKA 'UNKNOWN!')
2018-12-17T23:12:34.103408478Z 37 PC: 12eea | Set interrupt vector (Interrupt = '208' AKA 'UNKNOWN!')
2018-12-17T23:12:34.106432574Z 37 PC: 12eea | Set interrupt vector (Interrupt = '209' AKA 'UNKNOWN!')
2018-12-17T23:12:34.10921159Z 37 PC: 12eea | Set interrupt vector (Interrupt = '210' AKA 'UNKNOWN!')
2018-12-17T23:12:34.11037612Z 37 PC: 12eea | Set interrupt vector (Interrupt = '211' AKA 'UNKNOWN!')
2018-12-17T23:12:34.111456521Z 37 PC: 12eea | Set interrupt vector (Interrupt = '212' AKA 'UNKNOWN!')
2018-12-17T23:12:34.113267075Z 37 PC: 12eea | Set interrupt vector (Interrupt = '213' AKA 'UNKNOWN!')
2018-12-17T23:12:34.11450835Z 37 PC: 12eea | Set interrupt vector (Interrupt = '214' AKA 'UNKNOWN!')
2018-12-17T23:12:34.115600313Z 37 PC: 12eea | Set interrupt vector (Interrupt = '215' AKA 'UNKNOWN!')
2018-12-17T23:12:34.118212715Z 37 PC: 12eea | Set interrupt vector (Interrupt = '216' AKA 'UNKNOWN!')
2018-12-17T23:12:34.119979498Z 37 PC: 12eea | Set interrupt vector (Interrupt = '217' AKA 'UNKNOWN!')
2018-12-17T23:12:34.121667081Z 37 PC: 12eea | Set interrupt vector (Interrupt = '218' AKA 'UNKNOWN!')
2018-12-17T23:12:34.123764384Z 37 PC: 12eea | Set interrupt vector (Interrupt = '219' AKA 'UNKNOWN!')
2018-12-17T23:12:34.125510708Z 37 PC: 12eea | Set interrupt vector (Interrupt = '220' AKA 'UNKNOWN!')
2018-12-17T23:12:34.12725099Z 37 PC: 12eea | Set interrupt vector (Interrupt = '221' AKA 'UNKNOWN!')
2018-12-17T23:12:34.128922524Z 37 PC: 12eea | Set interrupt vector (Interrupt = '222' AKA 'UNKNOWN!')
2018-12-17T23:12:34.13086173Z 37 PC: 12eea | Set interrupt vector (Interrupt = '223' AKA 'UNKNOWN!')
2018-12-17T23:12:34.132080662Z 37 PC: 12eea | Set interrupt vector (Interrupt = '224' AKA 'UNKNOWN!')
2018-12-17T23:12:34.133290407Z 37 PC: 12eea | Set interrupt vector (Interrupt = '225' AKA 'UNKNOWN!')
2018-12-17T23:12:34.13667469Z 37 PC: 12eea | Set interrupt vector (Interrupt = '226' AKA 'UNKNOWN!')
2018-12-17T23:12:34.137980035Z 37 PC: 12eea | Set interrupt vector (Interrupt = '227' AKA 'UNKNOWN!')
2018-12-17T23:12:34.139336445Z 37 PC: 12eea | Set interrupt vector (Interrupt = '228' AKA 'UNKNOWN!')
2018-12-17T23:12:34.14152466Z 37 PC: 12eea | Set interrupt vector (Interrupt = '229' AKA 'UNKNOWN!')
2018-12-17T23:12:34.142808464Z 37 PC: 12eea | Set interrupt vector (Interrupt = '230' AKA 'UNKNOWN!')
2018-12-17T23:12:34.144049427Z 37 PC: 12eea | Set interrupt vector (Interrupt = '231' AKA 'UNKNOWN!')
2018-12-17T23:12:34.146255666Z 37 PC: 12eea | Set interrupt vector (Interrupt = '232' AKA 'UNKNOWN!')
2018-12-17T23:12:34.148144427Z 37 PC: 12eea | Set interrupt vector (Interrupt = '233' AKA 'UNKNOWN!')
2018-12-17T23:12:34.149929033Z 37 PC: 12eea | Set interrupt vector (Interrupt = '234' AKA 'UNKNOWN!')
2018-12-17T23:12:34.152677632Z 37 PC: 12eea | Set interrupt vector (Interrupt = '235' AKA 'UNKNOWN!')
2018-12-17T23:12:34.154568277Z 37 PC: 12eea | Set interrupt vector (Interrupt = '236' AKA 'UNKNOWN!')
2018-12-17T23:12:34.156336291Z 37 PC: 12eea | Set interrupt vector (Interrupt = '237' AKA 'UNKNOWN!')
2018-12-17T23:12:34.159041077Z 37 PC: 12eea | Set interrupt vector (Interrupt = '238' AKA 'UNKNOWN!')
2018-12-17T23:12:34.160784054Z 37 PC: 12eea | Set interrupt vector (Interrupt = '239' AKA 'UNKNOWN!')
2018-12-17T23:12:34.16263771Z 37 PC: 12eea | Set interrupt vector (Interrupt = '240' AKA 'UNKNOWN!')
2018-12-17T23:12:34.165964676Z 37 PC: 12eea | Set interrupt vector (Interrupt = '241' AKA 'UNKNOWN!')
2018-12-17T23:12:34.167426314Z 37 PC: 12eea | Set interrupt vector (Interrupt = '242' AKA 'UNKNOWN!')
2018-12-17T23:12:34.168632322Z 37 PC: 12eff | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T23:12:34.172095775Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:12:34.173850835Z 72 PC: 12174 | Allocate memory
2018-12-17T23:12:34.18533001Z 72 PC: 1218d | Allocate memory
2018-12-17T23:12:34.187776961Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:12:34.189876408Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:12:34.191256263Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:12:34.192607133Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.195529649Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 5)
2018-12-17T23:12:34.197058684Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.210636575Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 5)
2018-12-17T23:12:34.22587578Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.227390087Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 5)
2018-12-17T23:12:34.229339724Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.231884689Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.23331011Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 6)
2018-12-17T23:12:34.234815811Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.24882354Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 6)
2018-12-17T23:12:34.262632496Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.264598954Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 6)
2018-12-17T23:12:34.26730412Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.269253856Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.271166493Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 7)
2018-12-17T23:12:34.274072407Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.28886381Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 7)
2018-12-17T23:12:34.302752556Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.306221318Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 7)
2018-12-17T23:12:34.308109709Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.309979415Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.312853729Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 8)
2018-12-17T23:12:34.314612376Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.337846585Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 8)
2018-12-17T23:12:34.353188784Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.355024496Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 8)
2018-12-17T23:12:34.35672882Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.359291008Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.360971839Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 9)
2018-12-17T23:12:34.362703715Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.377077864Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 9)
2018-12-17T23:12:34.391513017Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.393364669Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 9)
2018-12-17T23:12:34.396228975Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.398245967Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.400086728Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 10)
2018-12-17T23:12:34.401937839Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.416237939Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 10)
2018-12-17T23:12:34.430644869Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.432362459Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 10)
2018-12-17T23:12:34.435278632Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.438257193Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.439794834Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 11)
2018-12-17T23:12:34.442509839Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.456376273Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 11)
2018-12-17T23:12:34.470501092Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.47352546Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 11)
2018-12-17T23:12:34.475401688Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.47730114Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.48049775Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 12)
2018-12-17T23:12:34.488986362Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.510362677Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 12)
2018-12-17T23:12:34.525087114Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.526799053Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 12)
2018-12-17T23:12:34.528450027Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.530839631Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.532438387Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 13)
2018-12-17T23:12:34.534154644Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.548619343Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 13)
2018-12-17T23:12:34.563394295Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.565229636Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 13)
2018-12-17T23:12:34.56819411Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.570088642Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.571923423Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 14)
2018-12-17T23:12:34.574040003Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.588772465Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 14)
2018-12-17T23:12:34.602813658Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.604698612Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 14)
2018-12-17T23:12:34.607464493Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.609320062Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.611173327Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 15)
2018-12-17T23:12:34.614258808Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.629022419Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 15)
2018-12-17T23:12:34.64303078Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.646138804Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 15)
2018-12-17T23:12:34.647886691Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.649643003Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.652363549Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 16)
2018-12-17T23:12:34.654090025Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.667963692Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 16)
2018-12-17T23:12:34.683263782Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.68526197Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 16)
2018-12-17T23:12:34.686910079Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.689280055Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.691036678Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 17)
2018-12-17T23:12:34.692688073Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.708280853Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 17)
2018-12-17T23:12:34.722284906Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.72429759Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 17)
2018-12-17T23:12:34.727352695Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.729219575Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.731407209Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 18)
2018-12-17T23:12:34.734241338Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.748504007Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 18)
2018-12-17T23:12:34.763443258Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.765397313Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 18)
2018-12-17T23:12:34.767382866Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.768986061Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:34.7705543Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 19)
2018-12-17T23:12:34.772445045Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:34.786357405Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 19)
2018-12-17T23:12:34.800157504Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:34.802592202Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 19)
2018-12-17T23:12:34.804300063Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.807543983Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T23:12:34.810071556Z 56 PC: 94df9 | Get or set country info
2018-12-17T23:12:34.812098287Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:12:34.816793065Z 25 PC: 94e62 | Get default drive
2018-12-17T23:12:34.819629338Z 71 PC: 970dd | Get current directory
2018-12-17T23:12:34.824047065Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:12:34.829485441Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T23:12:34.833777542Z 93 PC: 94f20 | File sharing functions
2018-12-17T23:12:34.836496775Z 93 PC: 94f27 | File sharing functions
2018-12-17T23:12:34.838959405Z 10 PC: 94f39 | Buffered keyboard input
2018-12-17T23:12:48.90831772Z 0 PC: 0 | Program terminate
2018-12-17T23:12:50.264189617Z 0 PC: 0 | Program terminate
2018-12-17T23:12:50.368119995Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:12:50.375094549Z 41 PC: 94fae | Parse filename
2018-12-17T23:12:50.377624245Z 41 PC: 9502f | Parse filename
2018-12-17T23:12:50.382430382Z 41 PC: 9504c | Parse filename
2018-12-17T23:12:50.386466762Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T23:12:50.388495587Z 71 PC: 986f3 | Get current directory
2018-12-17T23:12:50.398013974Z 78 PC: 986fe | Find first file
2018-12-17T23:12:50.42111504Z 71 PC: 9856c | Get current directory
2018-12-17T23:12:50.424853239Z 73 PC: 97c09 | Release memory
2018-12-17T23:12:50.427544109Z 75 PC: 11821 | Execute program
2018-12-17T23:12:50.442930569Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-17T23:12:50.448477579Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-17T23:12:50.452420834Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:12:50.460094442Z 72 PC: 12174 | Allocate memory
2018-12-17T23:12:50.462311581Z 72 PC: 1218d | Allocate memory
2018-12-17T23:12:50.465915327Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:12:50.470895471Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:12:50.472262601Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:12:50.473704002Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.476600729Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 5)
2018-12-17T23:12:50.47829233Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.492271935Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 5)
2018-12-17T23:12:50.507234348Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.509175258Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 5)
2018-12-17T23:12:50.511258635Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.514393489Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.516299113Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 6)
2018-12-17T23:12:50.518231656Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.539243284Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 6)
2018-12-17T23:12:50.554410782Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.556695959Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 6)
2018-12-17T23:12:50.5600893Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.562055046Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.563853758Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 7)
2018-12-17T23:12:50.566542333Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.582614143Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 7)
2018-12-17T23:12:50.597714265Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.601526894Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 7)
2018-12-17T23:12:50.603737591Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.605916548Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.609073593Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 8)
2018-12-17T23:12:50.610838672Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.624262143Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 8)
2018-12-17T23:12:50.638771253Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.640808114Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 8)
2018-12-17T23:12:50.642793697Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.64557162Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.647925576Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 9)
2018-12-17T23:12:50.650407312Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.666606652Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 9)
2018-12-17T23:12:50.682503222Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.686543178Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 9)
2018-12-17T23:12:50.688614282Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.690621727Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.693386245Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 10)
2018-12-17T23:12:50.695495461Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.709602125Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 10)
2018-12-17T23:12:50.72479406Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.727558878Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 10)
2018-12-17T23:12:50.729296836Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.73202177Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.733790717Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 11)
2018-12-17T23:12:50.735831474Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.751455371Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 11)
2018-12-17T23:12:50.766675709Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.768971616Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 11)
2018-12-17T23:12:50.772422905Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.77461084Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.77672763Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 12)
2018-12-17T23:12:50.779954166Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.793929834Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 12)
2018-12-17T23:12:50.808782822Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.812114266Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 12)
2018-12-17T23:12:50.814087446Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.815848407Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.818713855Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 13)
2018-12-17T23:12:50.820526663Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.834303167Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 13)
2018-12-17T23:12:50.84845172Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.850473071Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 13)
2018-12-17T23:12:50.852139605Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.854802051Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.856467011Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 14)
2018-12-17T23:12:50.858444469Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.874164267Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 14)
2018-12-17T23:12:50.888443696Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.890482099Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 14)
2018-12-17T23:12:50.894742781Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.897045881Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.900413102Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 15)
2018-12-17T23:12:50.90390658Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.917842494Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 15)
2018-12-17T23:12:50.932281714Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.934762248Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 15)
2018-12-17T23:12:50.936676377Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.938644337Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.941699502Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 16)
2018-12-17T23:12:50.943621585Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.957403429Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 16)
2018-12-17T23:12:50.972609481Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:50.97411406Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 16)
2018-12-17T23:12:50.975512059Z 62 PC: 122ab | Close file
2018-12-17T23:12:50.977986301Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:50.979345456Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 17)
2018-12-17T23:12:50.981009996Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:50.993356461Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 17)
2018-12-17T23:12:51.006202545Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:51.008040301Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 17)
2018-12-17T23:12:51.010871755Z 62 PC: 122ab | Close file
2018-12-17T23:12:51.013256659Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:51.015477114Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 18)
2018-12-17T23:12:51.018103152Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:51.032157237Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 18)
2018-12-17T23:12:51.046308395Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:51.049186927Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 18)
2018-12-17T23:12:51.051096277Z 62 PC: 122ab | Close file
2018-12-17T23:12:51.053247702Z 66 PC: 304 | Move file pointer
2018-12-17T23:12:51.055874051Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 19)
2018-12-17T23:12:51.057908857Z 66 PC: 320 | Move file pointer
2018-12-17T23:12:51.073821307Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 19)
2018-12-17T23:12:51.087998273Z 66 PC: 348 | Move file pointer
2018-12-17T23:12:51.089978417Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 19)
2018-12-17T23:12:51.093393247Z 62 PC: 122ab | Close file
2018-12-17T23:12:51.096620265Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T23:12:51.098104586Z 56 PC: 94df9 | Get or set country info
2018-12-17T23:12:51.101182523Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:12:51.105789195Z 25 PC: 94e62 | Get default drive
2018-12-17T23:12:51.107551869Z 71 PC: 970dd | Get current directory
2018-12-17T23:12:51.111985776Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:12:51.115781102Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T23:12:51.118320267Z 93 PC: 94f20 | File sharing functions
2018-12-17T23:12:51.121469358Z 93 PC: 94f27 | File sharing functions
2018-12-17T23:12:51.123887595Z 10 PC: 94f39 | Buffered keyboard input

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17556,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:56:04.649756751Z 44 PC: 12e61 | Get time 0x12e61: cmp ch, 7
0x12e64: je 0x12e68
0x12e66: jmp 0x12ebf
0x12e68: mov ax, 3
0x12e6b: push bp
0x12e6c: mov cx, sp
0x12e6e: int 0x10
0x12e70: mov ah, 0xb
0x12e72: mov bx, 0xe
0x12e75: int 0x10
0x12e77: mov sp, cx
0x12e79: pop bp
0x12e7a: cld
0x12e7b: mov ax, 0xb800
0x12e7e: mov es, ax
0x12e80: xor di, di
0x12e82: mov cx, 0x550
0x12e85: mov ax, 0x1db
0x12e88: rep stosd dword ptr es:[di], eax
0x12e8a: mov cx, 0x280
2018-12-25T12:56:04.65288058Z 53 PC: 12ec4 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:56:04.655373113Z 37 PC: 12eea | Set interrupt vector (Interrupt = '128' AKA 'UNKNOWN!')
2018-12-25T12:56:04.65684995Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.658337343Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.660689Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.66260186Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.664465849Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.674926853Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.676829274Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.678794926Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.681038179Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.682955273Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.684608722Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.686050222Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.687624904Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.696547477Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.697873548Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.699868163Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.701128235Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.70244008Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.705789878Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.707244114Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.709793267Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.712948885Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.714655763Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.716790815Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.718434383Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.721352328Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.723637837Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.725903795Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.729058139Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.732681187Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.735047061Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.738134179Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.739657156Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.741257283Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.743998425Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.746533651Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.748227678Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.750842781Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.752308754Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.753866558Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.755410001Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.75730686Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.75870595Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.760274658Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.76234237Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.764639859Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.766080037Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.768157575Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.7695919Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.771025276Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.77367953Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.775258925Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.776866683Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.7789229Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.780809719Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.783138672Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.785410468Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.786947681Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.788723499Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.790010307Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.791280103Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.793530575Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.794930363Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.796332895Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.798739212Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.800301448Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.801955087Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.804290348Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.805894712Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.807458375Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.809764851Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.811046081Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.812429594Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.814913442Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.816666416Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.818409471Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.820292982Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.822015904Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.823640154Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.825295844Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.827169977Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.828460249Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.829736224Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.832495144Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.833985272Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.835605877Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.837820157Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.839208611Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.840830883Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.843102827Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.844926028Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.846587601Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.851165292Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.852844806Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.854502199Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.856319026Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.857836957Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.85911198Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.860371103Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.862009622Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.863253856Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.864667757Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.867087602Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.868732052Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.869960073Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.871881721Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.873010267Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.874125847Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.876210313Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.877712733Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.880153646Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.882179283Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.88368691Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.885339637Z 37 PC: 12eea | Set interrupt vector (See above)
2018-12-25T12:56:04.88748052Z 37 PC: 12eff | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:56:04.891136226Z 77 PC: 11fe0 | Get program return code
2018-12-25T12:56:04.892480556Z 72 PC: 12174 | Allocate memory
2018-12-25T12:56:04.89530128Z 72 PC: 1218d | Allocate memory
2018-12-25T12:56:04.897117548Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:56:04.898363023Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:56:04.900072002Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:56:04.902504771Z 66 PC: 304 | Move file pointer
2018-12-25T12:56:04.904695409Z 63 PC: 310 | Read file or device (Read 14 bytes on handle 5)
2018-12-25T12:56:04.907304482Z 66 PC: 320 | Move file pointer
2018-12-25T12:56:04.922276825Z 64 PC: 38e | Write file or device (Write 467 bytes on handle 5)
2018-12-25T12:56:04.937223Z 66 PC: 348 | Move file pointer
2018-12-25T12:56:04.939691416Z 64 PC: 35f | Write file or device (Write 14 bytes on handle 5)
2018-12-25T12:56:04.941530735Z 62 PC: 122ab | Close file
2018-12-25T12:56:04.943232496Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:04.945684229Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:04.947435074Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:04.963106574Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:04.978227093Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:04.980390032Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:04.982409845Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:04.984616947Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:04.986590171Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:04.98821921Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.002832692Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.019119355Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.021194522Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.023224493Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.0256392Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.027654044Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.02966541Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.04576697Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.060696015Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.062662791Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.065271223Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.067528207Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.06944132Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.072672358Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.08834329Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.103294322Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.106013888Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.107601067Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.109309809Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.112305277Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.114189254Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.129005152Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.145683176Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.147601734Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.149800061Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.152618025Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.154430389Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.156216147Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.180314148Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.195051595Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.197406133Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.200799491Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.202635963Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.204895209Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.207909065Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.223579049Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.238434459Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.240993784Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.243398272Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.245525067Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.24782192Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.250823902Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.266416925Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.281613637Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.285028594Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.286774831Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.289073931Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.291903602Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.294042801Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.309358078Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.325003547Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.32672226Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.328480989Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.331040708Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.333195666Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.33542598Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.351510627Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.366839545Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.369176428Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.373033398Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.374861413Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.377436743Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.380678985Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.395448339Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.410747885Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.413105787Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.416301067Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.418410508Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.421291662Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.423696874Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.432650665Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.447092036Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.448985541Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.450455976Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.451979155Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.453652417Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.454810506Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.463828284Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.472689901Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.474563127Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.47689038Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.479338351Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:05.48061222Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:05.481906682Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:05.494246863Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:05.506321552Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:05.507639924Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:05.509730129Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:05.511742932Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-25T12:56:05.512852817Z 56 PC: 94df9 | Get or set country info
2018-12-25T12:56:05.514885894Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T12:56:05.517859813Z 25 PC: 94e62 | Get default drive
2018-12-25T12:56:05.519120812Z 71 PC: 970dd | Get current directory
2018-12-25T12:56:05.522359734Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:56:05.524953857Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-25T12:56:05.526589357Z 93 PC: 94f20 | File sharing functions
2018-12-25T12:56:05.528403234Z 93 PC: 94f27 | File sharing functions
2018-12-25T12:56:05.529774613Z 10 PC: 94f39 | Buffered keyboard input
2018-12-25T12:56:19.626469552Z 0 PC: 0 | Program terminate
2018-12-25T12:56:20.97993792Z 0 PC: 0 | Program terminate (See above)
2018-12-25T12:56:21.082584163Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:56:21.089098053Z 41 PC: 94fae | Parse filename
2018-12-25T12:56:21.091024321Z 41 PC: 9502f | Parse filename
2018-12-25T12:56:21.094122186Z 41 PC: 9504c | Parse filename
2018-12-25T12:56:21.096444706Z 26 PC: 984f7 | Set disk transfer address
2018-12-25T12:56:21.098081101Z 71 PC: 986f3 | Get current directory
2018-12-25T12:56:21.106662307Z 78 PC: 986fe | Find first file
2018-12-25T12:56:21.117073819Z 71 PC: 9856c | Get current directory
2018-12-25T12:56:21.120396853Z 73 PC: 97c09 | Release memory
2018-12-25T12:56:21.122806007Z 75 PC: 11821 | Execute program
2018-12-25T12:56:21.13825085Z 9 PC: 12a47 | Display string (String= 'Hello, World! ')
2018-12-25T12:56:21.14265907Z 76 PC: 12a4b | Terminate with return code (Return code = '36')
2018-12-25T12:56:21.146718375Z 77 PC: 11fe0 | Get program return code (See above)
2018-12-25T12:56:21.14798151Z 72 PC: 12174 | Allocate memory (See above)
2018-12-25T12:56:21.150002093Z 72 PC: 1218d | Allocate memory (See above)
2018-12-25T12:56:21.153340584Z 37 PC: 123c4 | Set interrupt vector (See above)
2018-12-25T12:56:21.154591077Z 37 PC: 123cb | Set interrupt vector (See above)
2018-12-25T12:56:21.155820293Z 37 PC: 123d2 | Set interrupt vector (See above)
2018-12-25T12:56:21.157316694Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.160889728Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.162646188Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.177915981Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.192900317Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.194532228Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.196785086Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.198536689Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.200099286Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.202340718Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.216881313Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.233296684Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.235793321Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.237373401Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.238922649Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.24129512Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.243331701Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.257692143Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.273078297Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.274911571Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.276612845Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.279357254Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.281098894Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.282798833Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.29849348Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.313208444Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.315396169Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.318163331Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.319994154Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.32193804Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.325153663Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.340518249Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.365740031Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.36885465Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.370678962Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.372475021Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.374898351Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.376333377Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.389852878Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.401505154Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.40318647Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.40477655Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.40643167Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.407921616Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.409629644Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.425109844Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.439664268Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.441848958Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.444077498Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.446174483Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.448624965Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.450317269Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.464502176Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.481516667Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.483338513Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.485120434Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.487834135Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.489645365Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.491366753Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.506503981Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.521295879Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.523569411Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.526637943Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.52850431Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.530409449Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.533575611Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.548739526Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.563637577Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.566580249Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.568468567Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.570319985Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.5735731Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.57546297Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.590692159Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.606747047Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.609258516Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.610881702Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.612741373Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.614441391Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.616314308Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.631752153Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.646531427Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.64879081Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.650999994Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.65321679Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.656374418Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.658697602Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.674699587Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.690838546Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.692697625Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.694293481Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.696431336Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.698230785Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.700024454Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.715267699Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.741202555Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.743253281Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.746557108Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.748678299Z 66 PC: 304 | Move file pointer (See above)
2018-12-25T12:56:21.750752313Z 63 PC: 310 | Read file or device (See above)
2018-12-25T12:56:21.753572471Z 66 PC: 320 | Move file pointer (See above)
2018-12-25T12:56:21.770648585Z 64 PC: 38e | Write file or device (See above)
2018-12-25T12:56:21.77960293Z 66 PC: 348 | Move file pointer (See above)
2018-12-25T12:56:21.781737701Z 64 PC: 35f | Write file or device (See above)
2018-12-25T12:56:21.783409638Z 62 PC: 122ab | Close file (See above)
2018-12-25T12:56:21.786816496Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer (See above)
2018-12-25T12:56:21.788902373Z 56 PC: 94df9 | Get or set country info (See above)
2018-12-25T12:56:21.791170976Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:56:21.797132328Z 25 PC: 94e62 | Get default drive (See above)
2018-12-25T12:56:21.79899932Z 71 PC: 970dd | Get current directory (See above)
2018-12-25T12:56:21.804205584Z 64 PC: 9a848 | Write file or device (See above)
2018-12-25T12:56:21.808541497Z 2 PC: 970b2 | Character output (See above)
2018-12-25T12:56:21.811029315Z 93 PC: 94f20 | File sharing functions (See above)
2018-12-25T12:56:21.815708526Z 93 PC: 94f27 | File sharing functions (See above)
2018-12-25T12:56:21.819214029Z 10 PC: 94f39 | Buffered keyboard input (See above)

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":7,"Min":0,"Second":0,"TimeBased":true,"OriginalID":17556,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:56:05.320242118Z 44 PC: 12e61 | Get time 0x12e61: cmp ch, 7
0x12e64: je 0x12e68
0x12e66: jmp 0x12ebf
0x12e68: mov ax, 3
0x12e6b: push bp
0x12e6c: mov cx, sp
0x12e6e: int 0x10
0x12e70: mov ah, 0xb
0x12e72: mov bx, 0xe
0x12e75: int 0x10
0x12e77: mov sp, cx
0x12e79: pop bp
0x12e7a: cld
0x12e7b: mov ax, 0xb800
0x12e7e: mov es, ax
0x12e80: xor di, di
0x12e82: mov cx, 0x550
0x12e85: mov ax, 0x1db
0x12e88: rep stosd dword ptr es:[di], eax
0x12e8a: mov cx, 0x280