Sample viewer

vx.netlux.org/Virus.DOS.Twobytwo.5789

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:44:10.017734048Z 53 PC: 26be9 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-17T22:44:10.019261187Z 42 PC: 25a58 | Get date 0x25a58: cmp dh, 3
0x25a5b: jne 0x25a65
0x25a5d: cmp dl, 0x15
0x25a60: jne 0x25a65
0x25a62: call 0x359d7
0x25a65: cmp dl, 0x15
0x25a68: jne 0x25a75
0x25a6a: mov ah, 0x2c
0x25a6c: int 0x21
0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
2018-12-17T22:44:10.021638985Z 47 PC: 267cc | Get disk transfer address
2018-12-17T22:44:10.023489443Z 26 PC: 267dd | Set disk transfer address
2018-12-17T22:44:10.024746185Z 25 PC: 25aaa | Get default drive
2018-12-17T22:44:10.026012356Z 87 PC: 25ad9 | Get or set file date and time
2018-12-17T22:44:10.031268624Z 25 PC: 25b75 | Get default drive
2018-12-17T22:44:10.033043591Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.03459427Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.040519236Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.042266082Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.048258156Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.049880252Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.055251328Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.056972507Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.062809534Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.064665079Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.070145976Z 26 PC: 25d85 | Set disk transfer address
2018-12-17T22:44:10.072119546Z 78 PC: 25da3 | Find first file
2018-12-17T22:44:10.078821325Z 26 PC: 267f2 | Set disk transfer address
2018-12-17T22:44:10.080578784Z 87 PC: 26255 | Get or set file date and time
2018-12-17T22:44:10.083375602Z 53 PC: 262d9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:10.08503745Z 37 PC: 262e9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:44:10.088031102Z 80 PC: 14b99 | Set current PSP
2018-12-17T22:44:10.090260007Z 81 PC: 162b5 | Get current PSP
2018-12-17T22:44:10.092250809Z 61 PC: 9fae7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:44:10.099436829Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.102769162Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.104302854Z 63 PC: 9fae7 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:10.107195839Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.109617594Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.111496306Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.11303111Z 63 PC: 9fae7 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:44:10.116563541Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.117981148Z 62 PC: 9fae7 | Close file
2018-12-17T22:44:10.119885078Z 61 PC: 162e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:44:10.127520854Z 63 PC: 9fae7 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:10.13067885Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.132616496Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.135314305Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.137078552Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.138779766Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.141201985Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.142413771Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.143739449Z 63 PC: 9fae7 | Read file or device (Read 32 bytes on handle 5)
2018-12-17T22:44:10.147226487Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.148816264Z 66 PC: 163a0 | Move file pointer
2018-12-17T22:44:10.150153615Z 63 PC: 9fae7 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:44:10.153061334Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.154220041Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.155367764Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.156864719Z 66 PC: 163a0 | Move file pointer
2018-12-17T22:44:10.158050692Z 63 PC: 9fae7 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:44:10.162407951Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.164392928Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.165497953Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.166589483Z 63 PC: 9fae7 | Read file or device (Read 1495 bytes on handle 5)
2018-12-17T22:44:10.172213584Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.173289636Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.174223745Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.176004247Z 62 PC: 16312 | Close file
2018-12-17T22:44:10.17824329Z 81 PC: 162b5 | Get current PSP
2018-12-17T22:44:10.179646264Z 61 PC: 9fae7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:44:10.187389363Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.189224697Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.191002579Z 63 PC: 9fae7 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T22:44:10.194941745Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.1967573Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.198229252Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.200407979Z 63 PC: 9fae7 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T22:44:10.203455806Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.2051428Z 62 PC: 9fae7 | Close file
2018-12-17T22:44:10.209278765Z 61 PC: 162e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-17T22:44:10.216264686Z 63 PC: 9fae7 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:44:10.219317093Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.221837435Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.223741612Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.225863067Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.228091424Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.229769353Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.231767356Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.233841437Z 63 PC: 9fae7 | Read file or device (Read 32 bytes on handle 5)
2018-12-17T22:44:10.237217842Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.239747414Z 66 PC: 163a0 | Move file pointer
2018-12-17T22:44:10.241754852Z 63 PC: 9fae7 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:44:10.244599988Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.247125665Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.248933204Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.251531528Z 66 PC: 163a0 | Move file pointer
2018-12-17T22:44:10.254008607Z 63 PC: 9fae7 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:44:10.261329351Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.263075744Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.266878051Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.269159243Z 66 PC: 163a0 | Move file pointer
2018-12-17T22:44:10.270977248Z 63 PC: 9fae7 | Read file or device (Read 16 bytes on handle 5)
2018-12-17T22:44:10.275360318Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.278876682Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.280763487Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.289209729Z 63 PC: 9fae7 | Read file or device (Read 2197 bytes on handle 5)
2018-12-17T22:44:10.297063691Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.29865434Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.301355947Z 66 PC: 9fae7 | Move file pointer
2018-12-17T22:44:10.303371489Z 62 PC: 16312 | Close file
2018-12-17T22:44:10.305769391Z 48 PC: 14bc9 | Get DOS version
2018-12-17T22:44:10.308669962Z 2 PC: 149ad | Character output (Char = '49')
2018-12-17T22:44:10.311378082Z 2 PC: 149ad | Character output (Char = '6e')
2018-12-17T22:44:10.313830766Z 2 PC: 149ad | Character output (Char = '63')
2018-12-17T22:44:10.3175143Z 2 PC: 149ad | Character output (Char = '6f')
2018-12-17T22:44:10.320366507Z 2 PC: 149ad | Character output (Char = '72')
2018-12-17T22:44:10.323113752Z 2 PC: 149ad | Character output (Char = '72')
2018-12-17T22:44:10.326341035Z 2 PC: 149ad | Character output (Char = '65')
2018-12-17T22:44:10.329118322Z 2 PC: 149ad | Character output (Char = '63')
2018-12-17T22:44:10.331915673Z 2 PC: 149ad | Character output (Char = '74')
2018-12-17T22:44:10.335645988Z 2 PC: 149ad | Character output (Char = '20')
2018-12-17T22:44:10.338531159Z 2 PC: 149ad | Character output (Char = '4d')
2018-12-17T22:44:10.341330163Z 2 PC: 149ad | Character output (Char = '53')
2018-12-17T22:44:10.346559371Z 2 PC: 149ad | Character output (Char = '2d')
2018-12-17T22:44:10.349374399Z 2 PC: 149ad | Character output (Char = '44')
2018-12-17T22:44:10.352091529Z 2 PC: 149ad | Character output (Char = '4f')
2018-12-17T22:44:10.355851524Z 2 PC: 149ad | Character output (Char = '53')
2018-12-17T22:44:10.358880146Z 2 PC: 149ad | Character output (Char = '20')
2018-12-17T22:44:10.361706447Z 2 PC: 149ad | Character output (Char = '76')
2018-12-17T22:44:10.365370024Z 2 PC: 149ad | Character output (Char = '65')
2018-12-17T22:44:10.367770258Z 2 PC: 149ad | Character output (Char = '72')
2018-12-17T22:44:10.371250649Z 2 PC: 149ad | Character output (Char = '73')
2018-12-17T22:44:10.373420758Z 2 PC: 149ad | Character output (Char = '69')
2018-12-17T22:44:10.375826369Z 2 PC: 149ad | Character output (Char = '6f')
2018-12-17T22:44:10.378417709Z 2 PC: 149ad | Character output (Char = '6e')
2018-12-17T22:44:10.380880702Z 2 PC: 149ad | Character output (Char = '0d')
2018-12-17T22:44:10.382978315Z 2 PC: 149ad | Character output (Char = '0a')

{"DateBased":true,"Day":21,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8121,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:03:30.153215525Z 53 PC: 26be9 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:03:30.155009321Z 42 PC: 25a58 | Get date 0x25a58: cmp dh, 3
0x25a5b: jne 0x25a65
0x25a5d: cmp dl, 0x15
0x25a60: jne 0x25a65
0x25a62: call 0x359d7
0x25a65: cmp dl, 0x15
0x25a68: jne 0x25a75
0x25a6a: mov ah, 0x2c
0x25a6c: int 0x21
0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
2018-12-25T12:03:30.159438761Z 7 PC: 25a15 | Direct console input without echo

{"DateBased":true,"Day":1,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8121,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:03:30.731297038Z 53 PC: 26be9 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:03:30.733106126Z 42 PC: 25a58 | Get date 0x25a58: cmp dh, 3
0x25a5b: jne 0x25a65
0x25a5d: cmp dl, 0x15
0x25a60: jne 0x25a65
0x25a62: call 0x359d7
0x25a65: cmp dl, 0x15
0x25a68: jne 0x25a75
0x25a6a: mov ah, 0x2c
0x25a6c: int 0x21
0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
2018-12-25T12:03:30.735754577Z 47 PC: 267cc | Get disk transfer address
2018-12-25T12:03:30.737868839Z 26 PC: 267dd | Set disk transfer address
2018-12-25T12:03:30.739237984Z 25 PC: 25aaa | Get default drive
2018-12-25T12:03:30.740265911Z 87 PC: 25ad9 | Get or set file date and time
2018-12-25T12:03:30.742984517Z 25 PC: 25b75 | Get default drive
2018-12-25T12:03:30.744467801Z 26 PC: 25d85 | Set disk transfer address
2018-12-25T12:03:30.745814668Z 78 PC: 25da3 | Find first file
2018-12-25T12:03:30.761978415Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.76340819Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.768867052Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.778546166Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.784953829Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.786340802Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.792746415Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.79469091Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.800603026Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.80267964Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.808750843Z 26 PC: 267f2 | Set disk transfer address
2018-12-25T12:03:30.81098049Z 87 PC: 26255 | Get or set file date and time
2018-12-25T12:03:30.813329055Z 53 PC: 262d9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:30.815453364Z 37 PC: 262e9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:30.818303987Z 80 PC: 14b99 | Set current PSP
2018-12-25T12:03:30.825040568Z 81 PC: 162b5 | Get current PSP
2018-12-25T12:03:30.826177552Z 61 PC: 9fae7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:30.832793088Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.834712861Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.836548461Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.839290354Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.841292064Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.846861349Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.848181473Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.851725938Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.853695767Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:30.855857959Z 61 PC: 162e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:30.863892955Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.866429509Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.867747604Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.870269422Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.872728328Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.87445868Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.876678332Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.87818074Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.879567534Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.883739307Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.885297469Z 66 PC: 163a0 | Move file pointer
2018-12-25T12:03:30.886704903Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.889845798Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.891417087Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.892740905Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.894895177Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.896327013Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.90338862Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.904938847Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.906663006Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.908528816Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.916337518Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.91822063Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.919858861Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.922182235Z 62 PC: 16312 | Close file
2018-12-25T12:03:30.924238696Z 81 PC: 162b5 | Get current PSP (See above)
2018-12-25T12:03:30.92533211Z 61 PC: 9fae7 | Open file (See above)
2018-12-25T12:03:30.932964591Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.934313961Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.935616719Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.938977151Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.940396158Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.941711359Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.946659636Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.949597116Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.9509535Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:30.953274805Z 61 PC: 162e1 | Open file (See above)
2018-12-25T12:03:30.961023205Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.963905944Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.966843503Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.968781575Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.970500268Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.972910154Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.974544932Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.976188323Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.978637354Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.981939625Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.984103584Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.986361505Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.989046691Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.990556715Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.993047591Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.99466848Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.996172545Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.003447738Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.005012935Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.006758519Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.008948716Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:31.010345876Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.013317147Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.015345137Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.016656117Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.018378463Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.026669353Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.028001851Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.029499471Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.036298844Z 62 PC: 16312 | Close file (See above)
2018-12-25T12:03:31.038148281Z 48 PC: 14bc9 | Get DOS version
2018-12-25T12:03:31.039832867Z 2 PC: 149ad | Character output (Char = '49')
2018-12-25T12:03:31.04288599Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.045207204Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.048169539Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.05066315Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.052958216Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.055634308Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.057626279Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.059587524Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.061777601Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.063738188Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.065581391Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.067995753Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.069910261Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.071718829Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.074048216Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.07598883Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.077891924Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.080436393Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.082355504Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.084149374Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.086477183Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.0884305Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.09053785Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.092821586Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.094668579Z 2 PC: 149ad | Character output (See above)

{"DateBased":true,"Day":21,"Month":1,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8121,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:03:30.67404727Z 53 PC: 26be9 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:03:30.675838961Z 42 PC: 25a58 | Get date 0x25a58: cmp dh, 3
0x25a5b: jne 0x25a65
0x25a5d: cmp dl, 0x15
0x25a60: jne 0x25a65
0x25a62: call 0x359d7
0x25a65: cmp dl, 0x15
0x25a68: jne 0x25a75
0x25a6a: mov ah, 0x2c
0x25a6c: int 0x21
0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
2018-12-25T12:03:30.678648576Z 44 PC: 25a6e | Get time 0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
0x25a90: cld
0x25a91: mov cx, 0x20
0x25a94: rep movsb byte ptr es:[di], byte ptr [si]
0x25a96: mov word ptr cs:[0xeff0], si
0x25a9b: mov si, di
0x25a9d: call 0x2634a
0x25aa0: call 0x267c3
0x25aa3: call 0x2676b
0x25aa6: mov ah, 0x19
2018-12-25T12:03:30.682587116Z 47 PC: 267cc | Get disk transfer address
2018-12-25T12:03:30.684225109Z 26 PC: 267dd | Set disk transfer address
2018-12-25T12:03:30.686081189Z 25 PC: 25aaa | Get default drive
2018-12-25T12:03:30.687830198Z 87 PC: 25ad9 | Get or set file date and time
2018-12-25T12:03:30.690668903Z 25 PC: 25b75 | Get default drive
2018-12-25T12:03:30.692542253Z 26 PC: 25d85 | Set disk transfer address
2018-12-25T12:03:30.694316785Z 78 PC: 25da3 | Find first file
2018-12-25T12:03:30.701012088Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.702383776Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.708740142Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.710783908Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.717069976Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.718666912Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.725615546Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.727232567Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.734373508Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:30.73645376Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:30.742448682Z 26 PC: 267f2 | Set disk transfer address
2018-12-25T12:03:30.74465351Z 87 PC: 26255 | Get or set file date and time
2018-12-25T12:03:30.747818383Z 53 PC: 262d9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:30.749872419Z 37 PC: 262e9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:30.75334748Z 80 PC: 14b99 | Set current PSP
2018-12-25T12:03:30.756343341Z 81 PC: 162b5 | Get current PSP
2018-12-25T12:03:30.758394842Z 61 PC: 9fae7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:30.766390278Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.772454743Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.774104637Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.777054453Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.781364674Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.78345059Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.785625727Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.790065789Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.791698312Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:30.793677082Z 61 PC: 162e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:30.80742232Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.811022658Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.813246359Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.816857572Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.818866825Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.820818564Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.823388023Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.825089731Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.826660809Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.831354284Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.833222442Z 66 PC: 163a0 | Move file pointer
2018-12-25T12:03:30.834912098Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.838741295Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.840752715Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.84249396Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.845175449Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.846963913Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.85466353Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.857279003Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.859208839Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.861395485Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.870242854Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.872351431Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.873987844Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.876419942Z 62 PC: 16312 | Close file
2018-12-25T12:03:30.878820648Z 81 PC: 162b5 | Get current PSP (See above)
2018-12-25T12:03:30.880192664Z 61 PC: 9fae7 | Open file (See above)
2018-12-25T12:03:30.888070189Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.889538864Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.890902601Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.894767643Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.896563298Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.898495682Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.904243935Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.907652797Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.909287469Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:30.912209989Z 61 PC: 162e1 | Open file (See above)
2018-12-25T12:03:30.919710117Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.922412867Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.924172883Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.926711976Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.93681858Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.939086313Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.9405996Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.942003585Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.943400392Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.946877314Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.948288522Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.949766956Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.95271847Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.954009007Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.955530025Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.957447083Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.958833764Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.966575579Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.969052011Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.970958371Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.973026917Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:30.97584448Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.97945581Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.981431329Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.984758656Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.988329353Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:30.997048352Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:30.999710913Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.001405488Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.003276057Z 62 PC: 16312 | Close file (See above)
2018-12-25T12:03:31.006015648Z 48 PC: 14bc9 | Get DOS version
2018-12-25T12:03:31.007635352Z 2 PC: 149ad | Character output (Char = '49')
2018-12-25T12:03:31.010791677Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.013936768Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.016674856Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.019407412Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.022424417Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.025049373Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.028344814Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.031416691Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.033936166Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.037521222Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.040293824Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.042682728Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.045515753Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.048298581Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.050703355Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.053121819Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.05607596Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.059238262Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.06200234Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.064938316Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.068207481Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.070983024Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.074220779Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.076968832Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.080121284Z 2 PC: 149ad | Character output (See above)

{"DateBased":true,"Day":1,"Month":3,"Year":1980,"Hour":0,"Min":0,"Second":0,"TimeBased":false,"OriginalID":8121,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T12:03:31.676179186Z 53 PC: 26be9 | Get interrupt vector (Interrupt = '3' AKA 'Auxiliary input')
2018-12-25T12:03:31.677488507Z 42 PC: 25a58 | Get date 0x25a58: cmp dh, 3
0x25a5b: jne 0x25a65
0x25a5d: cmp dl, 0x15
0x25a60: jne 0x25a65
0x25a62: call 0x359d7
0x25a65: cmp dl, 0x15
0x25a68: jne 0x25a75
0x25a6a: mov ah, 0x2c
0x25a6c: int 0x21
0x25a6e: cmp cl, ch
0x25a70: jne 0x25a75
0x25a72: call 0x359d7
0x25a75: mov si, 0x177b
0x25a78: cmp word ptr cs:[0xe088], 0x61
0x25a7e: jne 0x25a88
0x25a80: add si, word ptr cs:[0xe040]
0x25a85: jmp 0x25a8d
0x25a87: nop
0x25a88: sub si, word ptr cs:[0xe040]
0x25a8d: mov di, 0xe400
2018-12-25T12:03:31.679662441Z 47 PC: 267cc | Get disk transfer address
2018-12-25T12:03:31.681243999Z 26 PC: 267dd | Set disk transfer address
2018-12-25T12:03:31.682651664Z 25 PC: 25aaa | Get default drive
2018-12-25T12:03:31.683948085Z 87 PC: 25ad9 | Get or set file date and time
2018-12-25T12:03:31.686484493Z 25 PC: 25b75 | Get default drive
2018-12-25T12:03:31.687948602Z 26 PC: 25d85 | Set disk transfer address
2018-12-25T12:03:31.689225938Z 78 PC: 25da3 | Find first file
2018-12-25T12:03:31.695410459Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:31.696744973Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:31.702331055Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:31.706794629Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:31.712280704Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:31.713590253Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:31.720334471Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:31.72133822Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:31.726471453Z 26 PC: 25d85 | Set disk transfer address (See above)
2018-12-25T12:03:31.728268977Z 78 PC: 25da3 | Find first file (See above)
2018-12-25T12:03:31.733408129Z 26 PC: 267f2 | Set disk transfer address
2018-12-25T12:03:31.73524754Z 87 PC: 26255 | Get or set file date and time
2018-12-25T12:03:31.745981229Z 53 PC: 262d9 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:31.747178121Z 37 PC: 262e9 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T12:03:31.749474477Z 80 PC: 14b99 | Set current PSP
2018-12-25T12:03:31.763529649Z 81 PC: 162b5 | Get current PSP
2018-12-25T12:03:31.764791335Z 61 PC: 9fae7 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:31.77153141Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.77451188Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.776186715Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.779044034Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.786997859Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.788410661Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.789714688Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.793251522Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.794879962Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:31.796621466Z 61 PC: 162e1 | Open file (Filename = 'A:\TEST.EXE')
2018-12-25T12:03:31.806323705Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.80885803Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.810220864Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.811902378Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.813196166Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.814502071Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.816674113Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.818079316Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.819661293Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.823859556Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.82535826Z 66 PC: 163a0 | Move file pointer
2018-12-25T12:03:31.826932607Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.830038791Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.831379868Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.832870893Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.835041271Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:31.836425306Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.843360139Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.845167827Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.84661915Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.849273753Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.85652197Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.858084573Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.860408919Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.862505926Z 62 PC: 16312 | Close file
2018-12-25T12:03:31.86456587Z 81 PC: 162b5 | Get current PSP (See above)
2018-12-25T12:03:31.866206014Z 61 PC: 9fae7 | Open file (See above)
2018-12-25T12:03:31.872762081Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.874098716Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.876005475Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.878714497Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.880210997Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.882366325Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.883703598Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.886619893Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.888737214Z 62 PC: 9fae7 | Close file (See above)
2018-12-25T12:03:31.89043832Z 61 PC: 162e1 | Open file (See above)
2018-12-25T12:03:31.897104242Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.901081364Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.902522395Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.903917656Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.906089412Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.907556534Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.909061659Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.911051443Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.912536393Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.915686258Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.918285937Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:31.919906537Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.922760549Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.924707953Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.926102976Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.928532546Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:31.930105609Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.93675089Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.938961326Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.940439843Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.942037894Z 66 PC: 163a0 | Move file pointer (See above)
2018-12-25T12:03:31.946608512Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.949645864Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.951103702Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.953478614Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.954984236Z 63 PC: 9fae7 | Read file or device (See above)
2018-12-25T12:03:31.959578428Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.96099404Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.962119508Z 66 PC: 9fae7 | Move file pointer (See above)
2018-12-25T12:03:31.963231475Z 62 PC: 16312 | Close file (See above)
2018-12-25T12:03:31.971038232Z 48 PC: 14bc9 | Get DOS version
2018-12-25T12:03:31.972023991Z 2 PC: 149ad | Character output (Char = '49')
2018-12-25T12:03:31.973520264Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.975472127Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.97702783Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.978612433Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.981438207Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.98291405Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.984357549Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.986429134Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.988168412Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.989780308Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.991866667Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.993792044Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.996017339Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:31.999467532Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.001916727Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.004365255Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.00781018Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.010284492Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.012629668Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.015898263Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.018331581Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.020470469Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.02317509Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.025221125Z 2 PC: 149ad | Character output (See above)
2018-12-25T12:03:32.027141881Z 2 PC: 149ad | Character output (See above)