Sample viewer

vx.netlux.org/Virus.DOS.Hadi.6153

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T21:59:52.667764907Z 239 PC: 13a64 | UNKNOWN!
2018-12-17T21:59:52.669542844Z 72 PC: 13a79 | Allocate memory
2018-12-17T21:59:52.671280396Z 98 PC: 13a7f | Get current PSP
2018-12-17T21:59:52.672434839Z 74 PC: 13a90 | Reallocate memory
2018-12-17T21:59:52.678596946Z 72 PC: 13a99 | Allocate memory
2018-12-17T21:59:52.682369673Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.685574008Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.687942848Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.691900158Z 255 PC: 13aee | UNKNOWN!
2018-12-17T21:59:52.693263043Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.695630533Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.699038998Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/....). Size=00001004h/0000004100d bytes. ')
2018-12-17T21:59:52.704805032Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.7071849Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.710860384Z 48 PC: 12a8f | Get DOS version
2018-12-17T21:59:52.712509447Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.714866854Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.720173188Z 67 PC: 9e6d7 | Get or set file attributes
2018-12-17T21:59:52.726211715Z 67 PC: 9e6f7 | Get or set file attributes
2018-12-17T21:59:52.743102687Z 61 PC: 9e703 | Open file (Filename = '')
2018-12-17T21:59:52.750467817Z 87 PC: 9e718 | Get or set file date and time
2018-12-17T21:59:52.751842195Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.754021238Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.755878651Z 63 PC: 9e743 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:52.758506292Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.760013163Z 63 PC: 9e743 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:52.763484188Z 63 PC: 9e743 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:52.768089546Z 63 PC: 9e743 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:52.771838275Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.774089566Z 63 PC: 9e743 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:52.782364862Z 63 PC: 9e743 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:52.785737599Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.787522726Z 64 PC: 9e774 | Write file or device (Write 0 bytes on handle 5)
2018-12-17T21:59:52.796174009Z 66 PC: 9e764 | Move file pointer
2018-12-17T21:59:52.797926294Z 64 PC: 9e755 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:59:52.80101889Z 87 PC: 9ee79 | Get or set file date and time
2018-12-17T21:59:52.803252923Z 62 PC: 9e732 | Close file
2018-12-17T21:59:52.811924941Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-17T21:59:52.819162865Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.822139657Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.824771143Z 93 PC: 12afe | File sharing functions
2018-12-17T21:59:52.827275769Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.829900374Z 42 PC: 9f7eb | Get date 0x9f7eb: mov byte ptr cs:[0x17b8], dl
0x9f7f0: cmp byte ptr cs:[0x17b2], 0
0x9f7f6: jne 0x9f815
0x9f7f8: cmp dh, 7
0x9f7fb: je 0x9f815
0x9f7fd: cmp dl, 1
0x9f800: je 0x9f80c
0x9f802: cmp dl, 0xa
0x9f805: je 0x9f80c
0x9f807: cmp dl, 0x14
0x9f80a: jne 0x9f815
0x9f80c: call 0xae59b
0x9f80f: mov byte ptr cs:[0x17b2], 1
0x9f815: cmp dl, 5
0x9f818: je 0x9f824
0x9f81a: cmp dl, 0xf
0x9f81d: je 0x9f824
0x9f81f: cmp dl, 0x19
0x9f822: jne 0x9f830
0x9f824: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.83259909Z 76 PC: 12ae3 | Terminate with return code (Return code = '0')
2018-12-17T21:59:52.835874952Z 72 PC: 9f1ea | Allocate memory
2018-12-17T21:59:52.838212834Z 73 PC: 9f22c | Release memory
2018-12-17T21:59:52.841361583Z 42 PC: 13f1b | Get date 0x13f1b: mov byte ptr cs:[0x17b8], dl
0x13f20: cmp byte ptr cs:[0x17b2], 0
0x13f26: jne 0x13f45
0x13f28: cmp dh, 7
0x13f2b: je 0x13f45
0x13f2d: cmp dl, 1
0x13f30: je 0x13f3c
0x13f32: cmp dl, 0xa
0x13f35: je 0x13f3c
0x13f37: cmp dl, 0x14
0x13f3a: jne 0x13f45
0x13f3c: call 0x22ccb
0x13f3f: mov byte ptr cs:[0x17b2], 1
0x13f45: cmp dl, 5
0x13f48: je 0x13f54
0x13f4a: cmp dl, 0xf
0x13f4d: je 0x13f54
0x13f4f: cmp dl, 0x19
0x13f52: jne 0x13f60
0x13f54: mov byte ptr cs:[0x17b3], 1
2018-12-17T21:59:52.844924532Z 77 PC: 11fe0 | Get program return code
2018-12-17T21:59:52.847677573Z 72 PC: 12174 | Allocate memory
2018-12-17T21:59:52.850112967Z 72 PC: 1218d | Allocate memory
2018-12-17T21:59:52.852084498Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T21:59:52.854242513Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T21:59:52.856604162Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T21:59:52.859270475Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:52.861299582Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:52.862814616Z 87 PC: 136fb | Get or set file date and time
2018-12-17T21:59:52.865073824Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.870602945Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.87499312Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.879027894Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.883243337Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.888374971Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.892422647Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.896798457Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.902914798Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.907846035Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.912030101Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.916963679Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.920933344Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.924908082Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.929473923Z 62 PC: 122ab | Close file
2018-12-17T21:59:52.933468772Z 67 PC: 12e07 | Get or set file attributes
2018-12-17T21:59:52.938559814Z 67 PC: 12e27 | Get or set file attributes
2018-12-17T21:59:53.297331648Z 61 PC: 12e33 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T21:59:53.303670859Z 87 PC: 12e48 | Get or set file date and time
2018-12-17T21:59:53.305440182Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.308157142Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.30979664Z 63 PC: 12e73 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:53.312602171Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.316028592Z 63 PC: 12e73 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:53.319161933Z 63 PC: 12e73 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:53.321833529Z 63 PC: 12e73 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:53.325468538Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.326856098Z 63 PC: 12e73 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:53.329261524Z 63 PC: 12e73 | Read file or device (Read 4 bytes on handle 5)
2018-12-17T21:59:53.332159441Z 87 PC: 135a9 | Get or set file date and time
2018-12-17T21:59:53.333682543Z 62 PC: 12e62 | Close file
2018-12-17T21:59:53.340917856Z 61 PC: 12354 | Open file (Filename = 'C:\COMMAND.COM')
2018-12-17T21:59:53.348434935Z 66 PC: 12372 | Move file pointer
2018-12-17T21:59:53.350240405Z 63 PC: 12383 | Read file or device (Read 44693 bytes on handle 5)
2018-12-17T21:59:53.364243152Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.367159845Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.368914192Z 63 PC: 12e73 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:53.371892911Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.374422592Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.376382845Z 63 PC: 12e73 | Read file or device (Read 1 bytes on handle 5)
2018-12-17T21:59:53.378897869Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.38175102Z 63 PC: 12e73 | Read file or device (Read 2 bytes on handle 5)
2018-12-17T21:59:53.384718057Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.386188888Z 64 PC: 12e85 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:59:53.389705519Z 66 PC: 12e94 | Move file pointer
2018-12-17T21:59:53.392503095Z 64 PC: 12e85 | Write file or device (Write 322 bytes on handle 5)
2018-12-17T21:59:53.400377064Z 64 PC: 137cc | Write file or device (Write 5823 bytes on handle 5)
2018-12-17T21:59:53.412054755Z 64 PC: 12e85 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:59:53.415583786Z 64 PC: 12e85 | Write file or device (Write 4 bytes on handle 5)
2018-12-17T21:59:53.418165619Z 64 PC: 12e85 | Write file or device (Write 2 bytes on handle 5)
2018-12-17T21:59:53.420764979Z 87 PC: 1369c | Get or set file date and time
2018-12-17T21:59:53.424050579Z 62 PC: 1238a | Close file
2018-12-17T21:59:53.433839175Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T21:59:53.435505616Z 56 PC: 94df9 | Get or set country info
2018-12-17T21:59:53.439279185Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T21:59:53.444352757Z 25 PC: 94e62 | Get default drive
2018-12-17T21:59:53.446253414Z 71 PC: 970dd | Get current directory
2018-12-17T21:59:53.451269134Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T21:59:53.455158048Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T21:59:53.45758775Z 93 PC: 94f20 | File sharing functions
2018-12-17T21:59:53.460670309Z 93 PC: 94f27 | File sharing functions
2018-12-17T21:59:53.462709428Z 10 PC: 94f39 | Buffered keyboard input
2018-12-17T22:00:07.631761396Z 0 PC: 0 | Program terminate
2018-12-17T22:00:08.986372724Z 0 PC: 0 | Program terminate
2018-12-17T22:00:09.088881787Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:00:09.095972549Z 41 PC: 94fae | Parse filename
2018-12-17T22:00:09.09850157Z 41 PC: 9502f | Parse filename
2018-12-17T22:00:09.100679518Z 41 PC: 9504c | Parse filename
2018-12-17T22:00:09.105310497Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T22:00:09.107326264Z 71 PC: 986f3 | Get current directory
2018-12-17T22:00:09.115544708Z 47 PC: 13c3a | Get disk transfer address
2018-12-17T22:00:09.117996796Z 78 PC: 13c64 | Find first file
2018-12-17T22:00:09.128169563Z 71 PC: 9856c | Get current directory
2018-12-17T22:00:09.131786502Z 73 PC: 97c09 | Release memory
2018-12-17T22:00:09.135505902Z 67 PC: 12e07 | Get or set file attributes
2018-12-17T22:00:09.14122041Z 67 PC: 12e27 | Get or set file attributes
2018-12-17T22:00:09.337670795Z 61 PC: 12e33 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:00:09.352210873Z 87 PC: 12e48 | Get or set file date and time
2018-12-17T22:00:09.353698949Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.355328576Z 87 PC: 1379c | Get or set file date and time
2018-12-17T22:00:09.357430596Z 62 PC: 12e62 | Close file
2018-12-17T22:00:09.369414469Z 75 PC: 13c64 | Execute program
2018-12-17T22:00:09.384619263Z 98 PC: 13b50 | Get current PSP
2018-12-17T22:00:09.386752499Z 9 PC: 14447 | Display string (String= 'Hello, World! ')
2018-12-17T22:00:09.391895523Z 42 PC: 13f1b | Get date 0x13f1b: mov byte ptr cs:[0x17b8], dl
0x13f20: cmp byte ptr cs:[0x17b2], 0
0x13f26: jne 0x13f45
0x13f28: cmp dh, 7
0x13f2b: je 0x13f45
0x13f2d: cmp dl, 1
0x13f30: je 0x13f3c
0x13f32: cmp dl, 0xa
0x13f35: je 0x13f3c
0x13f37: cmp dl, 0x14
0x13f3a: jne 0x13f45
0x13f3c: call 0x22ccb
0x13f3f: mov byte ptr cs:[0x17b2], 1
0x13f45: cmp dl, 5
0x13f48: je 0x13f54
0x13f4a: cmp dl, 0xf
0x13f4d: je 0x13f54
0x13f4f: cmp dl, 0x19
0x13f52: jne 0x13f60
0x13f54: mov byte ptr cs:[0x17b3], 1
2018-12-17T22:00:09.395514403Z 76 PC: 1444b | Terminate with return code (Return code = '36')
2018-12-17T22:00:09.402629061Z 42 PC: 13f1b | Get date 0x13f1b: mov byte ptr cs:[0x17b8], dl
0x13f20: cmp byte ptr cs:[0x17b2], 0
0x13f26: jne 0x13f45
0x13f28: cmp dh, 7
0x13f2b: je 0x13f45
0x13f2d: cmp dl, 1
0x13f30: je 0x13f3c
0x13f32: cmp dl, 0xa
0x13f35: je 0x13f3c
0x13f37: cmp dl, 0x14
0x13f3a: jne 0x13f45
0x13f3c: call 0x22ccb
0x13f3f: mov byte ptr cs:[0x17b2], 1
0x13f45: cmp dl, 5
0x13f48: je 0x13f54
0x13f4a: cmp dl, 0xf
0x13f4d: je 0x13f54
0x13f4f: cmp dl, 0x19
0x13f52: jne 0x13f60
0x13f54: mov byte ptr cs:[0x17b3], 1
2018-12-17T22:00:09.407609472Z 67 PC: 12e07 | Get or set file attributes
2018-12-17T22:00:09.413584812Z 67 PC: 12e27 | Get or set file attributes
2018-12-17T22:00:09.424319217Z 61 PC: 12e33 | Open file (Filename = 'E')
2018-12-17T22:00:09.428845766Z 87 PC: 12e48 | Get or set file date and time
2018-12-17T22:00:09.430245582Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.432141747Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.433555446Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.43531993Z 87 PC: 13dc9 | Get or set file date and time
2018-12-17T22:00:09.437937464Z 62 PC: 12e62 | Close file
2018-12-17T22:00:09.445277207Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:00:09.446675688Z 72 PC: 12174 | Allocate memory
2018-12-17T22:00:09.449280715Z 72 PC: 1218d | Allocate memory
2018-12-17T22:00:09.451135383Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:00:09.452524984Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:00:09.454491933Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:00:09.457145375Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.458643478Z 66 PC: 12e94 | Move file pointer
2018-12-17T22:00:09.460568294Z 87 PC: 136fb | Get or set file date and time
2018-12-17T22:00:09.462727788Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.46666583Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.47127816Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.475417987Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.479328531Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.483710794Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.487826556Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.491857255Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.49680893Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.50097455Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.505008635Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.510572505Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.514698824Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.519074765Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.523618994Z 62 PC: 122ab | Close file
2018-12-17T22:00:09.526995201Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T22:00:09.532616962Z 56 PC: 94df9 | Get or set country info
2018-12-17T22:00:09.535641487Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:00:09.540532818Z 25 PC: 94e62 | Get default drive
2018-12-17T22:00:09.543603488Z 71 PC: 970dd | Get current directory
2018-12-17T22:00:09.548112126Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:00:09.551560333Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T22:00:09.555027839Z 93 PC: 94f20 | File sharing functions
2018-12-17T22:00:09.556973666Z 93 PC: 94f27 | File sharing functions
2018-12-17T22:00:09.558978528Z 10 PC: 94f39 | Buffered keyboard input