Sample viewer

vx.netlux.org/Virus.DOS.Kusumah.2588

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:40:32.071553205Z 255 PC: 18029 | UNKNOWN!
2018-12-17T22:40:32.073781941Z 255 PC: 18087 | UNKNOWN!
2018-12-17T22:40:32.075173625Z 48 PC: 18170 | Get DOS version
2018-12-17T22:40:32.076856896Z 98 PC: 18178 | Get current PSP
2018-12-17T22:40:32.078542392Z 53 PC: 183b4 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:40:32.081587662Z 37 PC: 183c4 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-17T22:40:32.083270232Z 42 PC: 183cd | Get date 0x183cd: cmp al, 5
0x183cf: jne 0x183d6
0x183d1: mov byte ptr [0x111], 0xff
0x183d6: mov word ptr [0x104], 0x800a
0x183dc: mov byte ptr [0x106], 2
0x183e1: mov byte ptr [0x116], 0
0x183e6: push cs
0x183e7: pop ds
0x183e8: ret
0x183e9: inc word ptr [0xa75c]
0x183ed: cmp byte ptr [0xa75a], 0
0x183f2: jne 0x18429
0x183f4: xor dx, dx
0x183f6: push ds
0x183f7: mov ds, word ptr [0xa307]
0x183fb: mov ah, 0x40
0x183fd: int 0x21
0x183ff: pop ds
0x18400: mov dx, 0
0x18403: add byte ptr [bx + si], al
2018-12-17T22:40:32.086136004Z 53 PC: 17e98 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.090956298Z 53 PC: 17ea5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.092586781Z 37 PC: 17eb5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.094309366Z 37 PC: 17ebd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.098825739Z 25 PC: 9f6d6 | Get default drive
2018-12-17T22:40:32.100644775Z 14 PC: 9f6df | Set default drive (Drive = 'C')
2018-12-17T22:40:32.102639722Z 53 PC: 9f228 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.109887345Z 53 PC: 9f235 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.111706732Z 37 PC: 9f245 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.113224082Z 37 PC: 9f24d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.115680656Z 25 PC: 9f271 | Get default drive
2018-12-17T22:40:32.11768972Z 54 PC: 9f27a | Get free disk space
2018-12-17T22:40:32.162733021Z 67 PC: 9f2a3 | Get or set file attributes
2018-12-17T22:40:32.165058429Z 37 PC: 9f309 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.167254724Z 37 PC: 9f313 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.168988851Z 14 PC: 9f6ea | Set default drive (Drive = 'A')
2018-12-17T22:40:32.170929947Z 54 PC: 17eea | Get free disk space
2018-12-17T22:40:32.178258271Z 53 PC: 9f228 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.180065225Z 53 PC: 9f235 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.181779255Z 37 PC: 9f245 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.184420024Z 37 PC: 9f24d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.18844297Z 54 PC: 9f27a | Get free disk space
2018-12-17T22:40:32.198301337Z 67 PC: 9f2a3 | Get or set file attributes
2018-12-17T22:40:32.214933456Z 37 PC: 9f309 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.216837843Z 37 PC: 9f313 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.218708697Z 25 PC: 9f6d6 | Get default drive
2018-12-17T22:40:32.2209145Z 14 PC: 9f6df | Set default drive (Drive = 'C')
2018-12-17T22:40:32.223473175Z 53 PC: 9f228 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.225262325Z 53 PC: 9f235 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.227371938Z 37 PC: 9f245 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.229477893Z 37 PC: 9f24d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.231166435Z 25 PC: 9f271 | Get default drive
2018-12-17T22:40:32.232651885Z 54 PC: 9f27a | Get free disk space
2018-12-17T22:40:32.236629516Z 67 PC: 9f2a3 | Get or set file attributes
2018-12-17T22:40:32.242701831Z 67 PC: 9f2b6 | Get or set file attributes
2018-12-17T22:40:32.578772769Z 61 PC: 9f2bf | Open file (Filename = '��#3҇ѸB�!�f��h��>�')
2018-12-17T22:40:32.586751174Z 87 PC: 9f1ef | Get or set file date and time
2018-12-17T22:40:32.588884501Z 63 PC: 9f201 | Read file or device (Read 24 bytes on handle 5)
2018-12-17T22:40:32.595486631Z 66 PC: 9f140 | Move file pointer
2018-12-17T22:40:32.598401136Z 63 PC: 9f14c | Read file or device (Read 161 bytes on handle 5)
2018-12-17T22:40:32.605888488Z 66 PC: 9f081 | Move file pointer
2018-12-17T22:40:32.607885098Z 66 PC: 9f077 | Move file pointer
2018-12-17T22:40:32.610730363Z 64 PC: 9f1e0 | Write file or device (Write 2588 bytes on handle 5)
2018-12-17T22:40:32.622126207Z 66 PC: 9f077 | Move file pointer
2018-12-17T22:40:32.624402131Z 64 PC: 9f1b2 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T22:40:32.628530496Z 87 PC: 9f1cb | Get or set file date and time
2018-12-17T22:40:32.630629839Z 62 PC: 9f2d6 | Close file
2018-12-17T22:40:32.638679648Z 67 PC: 9f2e1 | Get or set file attributes
2018-12-17T22:40:32.649368744Z 37 PC: 9f309 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.651271989Z 37 PC: 9f313 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.652946965Z 14 PC: 9f6ea | Set default drive (Drive = 'A')
2018-12-17T22:40:32.654714215Z 67 PC: 17f13 | Get or set file attributes
2018-12-17T22:40:32.662353373Z 37 PC: 17f79 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.663986099Z 37 PC: 17f83 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.667658747Z 99 PC: 15209 | Get DBCS lead byte table pointer
2018-12-17T22:40:32.670989593Z 68 PC: 15223 | I/O control for devices (Set for = '')
2018-12-17T22:40:32.673254918Z 68 PC: 1522e | I/O control for devices (Set for = '')
2018-12-17T22:40:32.675368117Z 68 PC: 15239 | I/O control for devices (Set for = '')
2018-12-17T22:40:32.677716388Z 68 PC: 15241 | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-17T22:40:32.679832242Z 48 PC: 15246 | Get DOS version
2018-12-17T22:40:32.681555268Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:40:32.68405861Z 53 PC: 12b81 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-17T22:40:32.685954922Z 81 PC: 12bb7 | Get current PSP
2018-12-17T22:40:32.68734888Z 37 PC: 12d4a | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:40:32.690090529Z 53 PC: 12bcf | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.692250436Z 37 PC: 12be0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:40:32.693916576Z 37 PC: 12be7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:40:32.696423324Z 38 PC: 12a44 | Create PSP
2018-12-17T22:40:32.698176877Z 26 PC: 12c28 | Set disk transfer address
2018-12-17T22:40:32.700014899Z 99 PC: 12f8d | Get DBCS lead byte table pointer
2018-12-17T22:40:32.702600286Z 41 PC: 12cb5 | Parse filename
2018-12-17T22:40:32.704484855Z 55 PC: 13fab | Get or set switch character
2018-12-17T22:40:32.706235524Z 41 PC: 1358a | Parse filename
2018-12-17T22:40:32.708323685Z 55 PC: 13fab | Get or set switch character
2018-12-17T22:40:32.710363336Z 41 PC: 13598 | Parse filename
2018-12-17T22:40:32.712834828Z 64 PC: 1534b | Write file or device (Write 1 bytes on handle 1)
2018-12-17T22:40:32.716632952Z 10 PC: 12eca | Buffered keyboard input

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7013,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:00:49.289607156Z 255 PC: 18029 | UNKNOWN!
2018-12-25T12:00:49.290928553Z 255 PC: 18087 | UNKNOWN!
2018-12-25T12:00:49.291633209Z 48 PC: 18170 | Get DOS version
2018-12-25T12:00:49.292571012Z 98 PC: 18178 | Get current PSP
2018-12-25T12:00:49.293819457Z 53 PC: 183b4 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T12:00:49.294871238Z 37 PC: 183c4 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T12:00:49.296031575Z 42 PC: 183cd | Get date 0x183cd: cmp al, 5
0x183cf: jne 0x183d6
0x183d1: mov byte ptr [0x111], 0xff
0x183d6: mov word ptr [0x104], 0x800a
0x183dc: mov byte ptr [0x106], 2
0x183e1: mov byte ptr [0x116], 0
0x183e6: push cs
0x183e7: pop ds
0x183e8: ret
0x183e9: inc word ptr [0xa75c]
0x183ed: cmp byte ptr [0xa75a], 0
0x183f2: jne 0x18429
0x183f4: xor dx, dx
0x183f6: push ds
0x183f7: mov ds, word ptr [0xa307]
0x183fb: mov ah, 0x40
0x183fd: int 0x21
0x183ff: pop ds
0x18400: mov dx, 0
0x18403: add byte ptr [bx + si], al
2018-12-25T12:00:49.298481753Z 53 PC: 17e98 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.299382343Z 53 PC: 17ea5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.300184914Z 37 PC: 17eb5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.301353761Z 37 PC: 17ebd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.302407349Z 25 PC: 9f6d6 | Get default drive
2018-12-25T12:00:49.303165599Z 14 PC: 9f6df | Set default drive (Drive = 'C')
2018-12-25T12:00:49.304871592Z 53 PC: 9f228 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.305937957Z 53 PC: 9f235 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.30695285Z 37 PC: 9f245 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.308689433Z 37 PC: 9f24d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.309883428Z 25 PC: 9f271 | Get default drive
2018-12-25T12:00:49.310733978Z 54 PC: 9f27a | Get free disk space
2018-12-25T12:00:49.343465947Z 67 PC: 9f2a3 | Get or set file attributes
2018-12-25T12:00:49.345361246Z 37 PC: 9f309 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.346338666Z 37 PC: 9f313 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.34772116Z 14 PC: 9f6ea | Set default drive (Drive = 'A')
2018-12-25T12:00:49.348919552Z 54 PC: 17eea | Get free disk space
2018-12-25T12:00:49.354212172Z 53 PC: 9f228 | Get interrupt vector (See above)
2018-12-25T12:00:49.355639065Z 53 PC: 9f235 | Get interrupt vector (See above)
2018-12-25T12:00:49.356764471Z 37 PC: 9f245 | Set interrupt vector (See above)
2018-12-25T12:00:49.35771001Z 37 PC: 9f24d | Set interrupt vector (See above)
2018-12-25T12:00:49.358999671Z 54 PC: 9f27a | Get free disk space (See above)
2018-12-25T12:00:49.361628897Z 67 PC: 9f2a3 | Get or set file attributes (See above)
2018-12-25T12:00:49.371976903Z 37 PC: 9f309 | Set interrupt vector (See above)
2018-12-25T12:00:49.373185879Z 37 PC: 9f313 | Set interrupt vector (See above)
2018-12-25T12:00:49.374440576Z 25 PC: 9f6d6 | Get default drive (See above)
2018-12-25T12:00:49.375396628Z 14 PC: 9f6df | Set default drive (See above)
2018-12-25T12:00:49.376945204Z 53 PC: 9f228 | Get interrupt vector (See above)
2018-12-25T12:00:49.377941541Z 53 PC: 9f235 | Get interrupt vector (See above)
2018-12-25T12:00:49.379001379Z 37 PC: 9f245 | Set interrupt vector (See above)
2018-12-25T12:00:49.380155341Z 37 PC: 9f24d | Set interrupt vector (See above)
2018-12-25T12:00:49.381172143Z 25 PC: 9f271 | Get default drive (See above)
2018-12-25T12:00:49.38206459Z 54 PC: 9f27a | Get free disk space (See above)
2018-12-25T12:00:49.384740169Z 67 PC: 9f2a3 | Get or set file attributes (See above)
2018-12-25T12:00:49.390175608Z 67 PC: 9f2b6 | Get or set file attributes
2018-12-25T12:00:49.783795129Z 61 PC: 9f2bf | Open file (Filename = '��#3҇ѸB�!�f��h��>�')
2018-12-25T12:00:49.790315123Z 87 PC: 9f1ef | Get or set file date and time
2018-12-25T12:00:49.791422156Z 63 PC: 9f201 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T12:00:49.865842728Z 66 PC: 9f140 | Move file pointer
2018-12-25T12:00:49.867522547Z 63 PC: 9f14c | Read file or device (Read 161 bytes on handle 5)
2018-12-25T12:00:49.873633861Z 66 PC: 9f081 | Move file pointer
2018-12-25T12:00:49.874963756Z 66 PC: 9f077 | Move file pointer
2018-12-25T12:00:49.876919788Z 64 PC: 9f1e0 | Write file or device (Write 2588 bytes on handle 5)
2018-12-25T12:00:50.184128577Z 66 PC: 9f077 | Move file pointer (See above)
2018-12-25T12:00:50.18546355Z 64 PC: 9f1b2 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:00:50.188941473Z 87 PC: 9f1cb | Get or set file date and time
2018-12-25T12:00:50.190370337Z 62 PC: 9f2d6 | Close file
2018-12-25T12:00:50.407634672Z 67 PC: 9f2e1 | Get or set file attributes
2018-12-25T12:00:50.417569647Z 37 PC: 9f309 | Set interrupt vector (See above)
2018-12-25T12:00:50.419077538Z 37 PC: 9f313 | Set interrupt vector (See above)
2018-12-25T12:00:50.420335596Z 14 PC: 9f6ea | Set default drive (See above)
2018-12-25T12:00:50.421658928Z 67 PC: 17f13 | Get or set file attributes
2018-12-25T12:00:50.428555951Z 37 PC: 17f79 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.429778459Z 37 PC: 17f83 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:50.433235962Z 99 PC: 15209 | Get DBCS lead byte table pointer
2018-12-25T12:00:50.434982205Z 68 PC: 15223 | I/O control for devices (Set for = '')
2018-12-25T12:00:50.436516135Z 68 PC: 1522e | I/O control for devices (Set for = '')
2018-12-25T12:00:50.438458609Z 68 PC: 15239 | I/O control for devices (Set for = '')
2018-12-25T12:00:50.440532013Z 68 PC: 15241 | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-25T12:00:50.442670217Z 48 PC: 15246 | Get DOS version
2018-12-25T12:00:50.444454794Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:00:50.446619731Z 53 PC: 12b81 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:00:50.448277739Z 81 PC: 12bb7 | Get current PSP
2018-12-25T12:00:50.44919747Z 37 PC: 12d4a | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:00:50.451437431Z 53 PC: 12bcf | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.452726623Z 37 PC: 12be0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.453915802Z 37 PC: 12be7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:50.456001092Z 38 PC: 12a44 | Create PSP
2018-12-25T12:00:50.457717902Z 26 PC: 12c28 | Set disk transfer address
2018-12-25T12:00:50.459579227Z 99 PC: 12f8d | Get DBCS lead byte table pointer
2018-12-25T12:00:50.461746237Z 41 PC: 12cb5 | Parse filename
2018-12-25T12:00:50.463400386Z 55 PC: 13fab | Get or set switch character
2018-12-25T12:00:50.464949336Z 41 PC: 1358a | Parse filename
2018-12-25T12:00:50.467384854Z 55 PC: 13fab | Get or set switch character (See above)
2018-12-25T12:00:50.468835735Z 41 PC: 13598 | Parse filename
2018-12-25T12:00:50.470986533Z 64 PC: 1534b | Write file or device (Write 1 bytes on handle 1)
2018-12-25T12:00:50.475271829Z 10 PC: 12eca | Buffered keyboard input

{"DateBased":true,"Day":4,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":7013,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:00:49.328798883Z 255 PC: 18029 | UNKNOWN!
2018-12-25T12:00:49.329945787Z 255 PC: 18087 | UNKNOWN!
2018-12-25T12:00:49.330685005Z 48 PC: 18170 | Get DOS version
2018-12-25T12:00:49.331638975Z 98 PC: 18178 | Get current PSP
2018-12-25T12:00:49.336560592Z 53 PC: 183b4 | Get interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T12:00:49.337624659Z 37 PC: 183c4 | Set interrupt vector (Interrupt = '8' AKA 'Console input without echo')
2018-12-25T12:00:49.338580942Z 42 PC: 183cd | Get date 0x183cd: cmp al, 5
0x183cf: jne 0x183d6
0x183d1: mov byte ptr [0x111], 0xff
0x183d6: mov word ptr [0x104], 0x800a
0x183dc: mov byte ptr [0x106], 2
0x183e1: mov byte ptr [0x116], 0
0x183e6: push cs
0x183e7: pop ds
0x183e8: ret
0x183e9: inc word ptr [0xa75c]
0x183ed: cmp byte ptr [0xa75a], 0
0x183f2: jne 0x18429
0x183f4: xor dx, dx
0x183f6: push ds
0x183f7: mov ds, word ptr [0xa307]
0x183fb: mov ah, 0x40
0x183fd: int 0x21
0x183ff: pop ds
0x18400: mov dx, 0
0x18403: add byte ptr [bx + si], al
2018-12-25T12:00:49.341006558Z 53 PC: 17e98 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.342123766Z 53 PC: 17ea5 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.343510831Z 37 PC: 17eb5 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.344993645Z 37 PC: 17ebd | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.346404729Z 25 PC: 9f6d6 | Get default drive
2018-12-25T12:00:49.347682547Z 14 PC: 9f6df | Set default drive (Drive = 'C')
2018-12-25T12:00:49.349401169Z 53 PC: 9f228 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.350340757Z 53 PC: 9f235 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.351123477Z 37 PC: 9f245 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.352288439Z 37 PC: 9f24d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.353109912Z 25 PC: 9f271 | Get default drive
2018-12-25T12:00:49.353817498Z 54 PC: 9f27a | Get free disk space
2018-12-25T12:00:49.392304317Z 67 PC: 9f2a3 | Get or set file attributes
2018-12-25T12:00:49.394463098Z 37 PC: 9f309 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:49.395795332Z 37 PC: 9f313 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:49.397154368Z 14 PC: 9f6ea | Set default drive (Drive = 'A')
2018-12-25T12:00:49.399131559Z 54 PC: 17eea | Get free disk space
2018-12-25T12:00:49.40508937Z 53 PC: 9f228 | Get interrupt vector (See above)
2018-12-25T12:00:49.406185852Z 53 PC: 9f235 | Get interrupt vector (See above)
2018-12-25T12:00:49.409232366Z 37 PC: 9f245 | Set interrupt vector (See above)
2018-12-25T12:00:49.410572287Z 37 PC: 9f24d | Set interrupt vector (See above)
2018-12-25T12:00:49.41191457Z 54 PC: 9f27a | Get free disk space (See above)
2018-12-25T12:00:49.414377498Z 67 PC: 9f2a3 | Get or set file attributes (See above)
2018-12-25T12:00:49.423747794Z 60 PC: 9f61b | Create or truncate file
2018-12-25T12:00:49.783878383Z 64 PC: 9f629 | Write file or device (Write 73 bytes on handle 5)
2018-12-25T12:00:49.868044279Z 62 PC: 9f62d | Close file
2018-12-25T12:00:50.053824594Z 37 PC: 9f309 | Set interrupt vector (See above)
2018-12-25T12:00:50.054877667Z 37 PC: 9f313 | Set interrupt vector (See above)
2018-12-25T12:00:50.056366091Z 25 PC: 9f6d6 | Get default drive (See above)
2018-12-25T12:00:50.057322294Z 14 PC: 9f6df | Set default drive (See above)
2018-12-25T12:00:50.058602213Z 53 PC: 9f228 | Get interrupt vector (See above)
2018-12-25T12:00:50.060181561Z 53 PC: 9f235 | Get interrupt vector (See above)
2018-12-25T12:00:50.061122753Z 37 PC: 9f245 | Set interrupt vector (See above)
2018-12-25T12:00:50.062024655Z 37 PC: 9f24d | Set interrupt vector (See above)
2018-12-25T12:00:50.063676097Z 25 PC: 9f271 | Get default drive (See above)
2018-12-25T12:00:50.064559697Z 54 PC: 9f27a | Get free disk space (See above)
2018-12-25T12:00:50.06634924Z 67 PC: 9f2a3 | Get or set file attributes (See above)
2018-12-25T12:00:50.070231202Z 67 PC: 9f2b6 | Get or set file attributes
2018-12-25T12:00:50.403267811Z 61 PC: 9f2bf | Open file (Filename = '��#3҇ѸB�!�f��h��>�')
2018-12-25T12:00:50.407719866Z 87 PC: 9f1ef | Get or set file date and time
2018-12-25T12:00:50.409258234Z 63 PC: 9f201 | Read file or device (Read 24 bytes on handle 5)
2018-12-25T12:00:50.4127096Z 66 PC: 9f140 | Move file pointer
2018-12-25T12:00:50.41365116Z 63 PC: 9f14c | Read file or device (Read 161 bytes on handle 5)
2018-12-25T12:00:50.418062218Z 66 PC: 9f081 | Move file pointer
2018-12-25T12:00:50.419761636Z 66 PC: 9f077 | Move file pointer
2018-12-25T12:00:50.421478301Z 64 PC: 9f1e0 | Write file or device (Write 2588 bytes on handle 5)
2018-12-25T12:00:50.437586245Z 66 PC: 9f077 | Move file pointer (See above)
2018-12-25T12:00:50.438912785Z 64 PC: 9f1b2 | Write file or device (Write 3 bytes on handle 5)
2018-12-25T12:00:50.441573542Z 87 PC: 9f1cb | Get or set file date and time
2018-12-25T12:00:50.444388046Z 62 PC: 9f2d6 | Close file
2018-12-25T12:00:50.451605207Z 67 PC: 9f2e1 | Get or set file attributes
2018-12-25T12:00:50.460641678Z 37 PC: 9f309 | Set interrupt vector (See above)
2018-12-25T12:00:50.463221277Z 37 PC: 9f313 | Set interrupt vector (See above)
2018-12-25T12:00:50.46480285Z 14 PC: 9f6ea | Set default drive (See above)
2018-12-25T12:00:50.466377471Z 67 PC: 17f13 | Get or set file attributes
2018-12-25T12:00:50.474039836Z 37 PC: 17f79 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.476014027Z 37 PC: 17f83 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:50.479520668Z 99 PC: 15209 | Get DBCS lead byte table pointer
2018-12-25T12:00:50.481917292Z 68 PC: 15223 | I/O control for devices (Set for = '')
2018-12-25T12:00:50.48403528Z 68 PC: 1522e | I/O control for devices (Set for = '')
2018-12-25T12:00:50.486038371Z 68 PC: 15239 | I/O control for devices (Set for = '')
2018-12-25T12:00:50.488555012Z 68 PC: 15241 | I/O control for devices (Set for = '��b���g�t�S3����[r�2��W�<t�<u�6�u����>��>W')
2018-12-25T12:00:50.490891397Z 48 PC: 15246 | Get DOS version
2018-12-25T12:00:50.492493677Z 53 PC: 12b72 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:00:50.494720661Z 53 PC: 12b81 | Get interrupt vector (Interrupt = '1' AKA 'Character input')
2018-12-25T12:00:50.496440462Z 81 PC: 12bb7 | Get current PSP
2018-12-25T12:00:50.497706207Z 37 PC: 12d4a | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T12:00:50.499986365Z 53 PC: 12bcf | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.502711018Z 37 PC: 12be0 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T12:00:50.504212995Z 37 PC: 12be7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T12:00:50.505942419Z 38 PC: 12a44 | Create PSP
2018-12-25T12:00:50.508565645Z 26 PC: 12c28 | Set disk transfer address
2018-12-25T12:00:50.510374834Z 99 PC: 12f8d | Get DBCS lead byte table pointer
2018-12-25T12:00:50.512039441Z 41 PC: 12cb5 | Parse filename
2018-12-25T12:00:50.51487428Z 55 PC: 13fab | Get or set switch character
2018-12-25T12:00:50.516576615Z 41 PC: 1358a | Parse filename
2018-12-25T12:00:50.518379923Z 55 PC: 13fab | Get or set switch character (See above)
2018-12-25T12:00:50.520608787Z 41 PC: 13598 | Parse filename
2018-12-25T12:00:50.522890673Z 64 PC: 1534b | Write file or device (Write 1 bytes on handle 1)
2018-12-25T12:00:50.526146515Z 10 PC: 12eca | Buffered keyboard input