Sample viewer

vx.netlux.org/Virus.DOS.MGUL.950

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:56:58.607596697Z 170 PC: 13bd7 | UNKNOWN!
2018-12-17T22:56:58.60906384Z 53 PC: 13c06 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:58.61020869Z 37 PC: 13c16 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:56:58.611993725Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.614609479Z 9 PC: 13bc2 | Display string (Could not find end pointer)
2018-12-17T22:56:58.61949552Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.622023908Z 76 PC: 13bc8 | Terminate with return code (Return code = '0')
2018-12-17T22:56:58.626219958Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.629268884Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:56:58.631005647Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.633477995Z 72 PC: 12174 | Allocate memory
2018-12-17T22:56:58.635973519Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.638414709Z 72 PC: 1218d | Allocate memory
2018-12-17T22:56:58.640758261Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.644301387Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:56:58.645633587Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.648129344Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:56:58.650030557Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.652981059Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:56:58.654794919Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.65783223Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.659725943Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.662757378Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.664851561Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.668432624Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.673740182Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.676846236Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.68948801Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.692333417Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.695144877Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.701684825Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.703564798Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.706625829Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.709265719Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.711752188Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.713377653Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.716607009Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.718586351Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.722063804Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.724545695Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.729273339Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.731349391Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.734281175Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.737109055Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.740150893Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.742212743Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.746012586Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.748249222Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.750933636Z 62 PC: 122ab | Close file
2018-12-17T22:56:58.755347745Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.758232302Z 99 PC: 9a0d7 | Get DBCS lead byte table pointer
2018-12-17T22:56:58.760161582Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.763584853Z 56 PC: 948f9 | Get or set country info
2018-12-17T22:56:58.765837131Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.768400101Z 64 PC: 9a348 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:56:58.773896777Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.77643926Z 25 PC: 94962 | Get default drive
2018-12-17T22:56:58.778183084Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.781620134Z 71 PC: 96bdd | Get current directory
2018-12-17T22:56:58.785932509Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.788419794Z 64 PC: 9a348 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:56:58.791926522Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.79543679Z 2 PC: 96bb2 | Character output (Char = '3e')
2018-12-17T22:56:58.79814203Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.800918159Z 93 PC: 94a20 | File sharing functions
2018-12-17T22:56:58.804021096Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.806602Z 93 PC: 94a27 | File sharing functions
2018-12-17T22:56:58.809401702Z 42 PC: 9f8dd | Get date 0x9f8dd: ret
0x9f8de: mov ax, 0x5700
0x9f8e1: call 0xaf8d6
0x9f8e4: push cx
0x9f8e5: push dx
0x9f8e6: push cs
0x9f8e7: pop ds
0x9f8e8: mov ah, 0x3f
0x9f8ea: mov dx, 0x8a
0x9f8ed: mov cx, 0x1c
0x9f8f0: call 0xaf8d6
0x9f8f3: mov cx, 0xffff
0x9f8f6: mov dx, 0xffff
0x9f8f9: mov ax, 0x4202
0x9f8fc: call 0xaf8d6
0x9f8ff: mov ah, 0x3f
0x9f901: mov cx, 1
0x9f904: mov dx, 0x3b7
0x9f907: nop
0x9f908: call 0xaf8d6
2018-12-17T22:56:58.812987831Z 10 PC: 94a39 | Buffered keyboard input