Sample viewer

vx.netlux.org/Virus.DOS.Levi.800

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T23:12:34.11573579Z 187 PC: 134b9 | UNKNOWN!
2018-12-17T23:12:34.117494778Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.121066415Z 9 PC: 12a86 | Display string (String= 'Goat file (COM/....). Size=00000834h/0000002100d bytes. ')
2018-12-17T23:12:34.127828987Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.130813614Z 48 PC: 12a8f | Get DOS version
2018-12-17T23:12:34.133440551Z 67 PC: 9ec78 | Get or set file attributes
2018-12-17T23:12:34.140145666Z 67 PC: 9ec78 | Get or set file attributes
2018-12-17T23:12:34.157533808Z 61 PC: 9ec78 | Open file (Filename = '')
2018-12-17T23:12:34.166199795Z 87 PC: 9ec78 | Get or set file date and time
2018-12-17T23:12:34.168646219Z 87 PC: 9ec78 | Get or set file date and time
2018-12-17T23:12:34.170353224Z 63 PC: 9ec78 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T23:12:34.173639745Z 66 PC: 9ec78 | Move file pointer
2018-12-17T23:12:34.176388222Z 66 PC: 9ec78 | Move file pointer
2018-12-17T23:12:34.178322999Z 64 PC: 9ec78 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T23:12:34.181802404Z 66 PC: 9ec78 | Move file pointer
2018-12-17T23:12:34.185824036Z 64 PC: 9ec78 | Write file or device (Write 800 bytes on handle 5)
2018-12-17T23:12:34.202227157Z 87 PC: 9ec78 | Get or set file date and time
2018-12-17T23:12:34.204488766Z 62 PC: 9ec78 | Close file
2018-12-17T23:12:34.223446908Z 67 PC: 9ec78 | Get or set file attributes
2018-12-17T23:12:34.286778952Z 61 PC: 12b5c | Open file (Filename = '')
2018-12-17T23:12:34.294641152Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.298035255Z 93 PC: 12afe | File sharing functions
2018-12-17T23:12:34.301091873Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.303667486Z 9 PC: 12a86 | Display string (String= 'Size change=0640h/01600d. ')
2018-12-17T23:12:34.308771092Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.311340383Z 76 PC: 12ae3 | Terminate with return code (Return code = '1')
2018-12-17T23:12:34.3150304Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.317761536Z 77 PC: 11fe0 | Get program return code
2018-12-17T23:12:34.327846837Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.331061215Z 72 PC: 12174 | Allocate memory
2018-12-17T23:12:34.333382789Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.336670472Z 72 PC: 1218d | Allocate memory
2018-12-17T23:12:34.339148964Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.341394968Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T23:12:34.343376275Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.345870398Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T23:12:34.347227864Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.350215268Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T23:12:34.35145235Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.35365243Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.35615265Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.358479999Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.360454869Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.363574764Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.365309097Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.367638557Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.369332778Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.372528816Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.374289863Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.377217333Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.380026604Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.38266751Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.384744269Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.388065739Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.390127205Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.392696603Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.394856807Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.397535847Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.399417556Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.402366765Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.404798743Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.407634195Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.409742991Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.412949624Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.415071672Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.417874073Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.420307655Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.422850109Z 62 PC: 122ab | Close file
2018-12-17T23:12:34.426269173Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.429556687Z 99 PC: 995d7 | Get DBCS lead byte table pointer
2018-12-17T23:12:34.431502252Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.434325006Z 56 PC: 93df9 | Get or set country info
2018-12-17T23:12:34.437536452Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.440369512Z 64 PC: 99848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T23:12:34.445874326Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.449173087Z 25 PC: 93e62 | Get default drive
2018-12-17T23:12:34.451280623Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.453831484Z 71 PC: 960dd | Get current directory
2018-12-17T23:12:34.459259449Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.462156859Z 64 PC: 99848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T23:12:34.466045012Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.468778848Z 2 PC: 960b2 | Character output (Char = '3e')
2018-12-17T23:12:34.472902959Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.47577752Z 93 PC: 93f20 | File sharing functions
2018-12-17T23:12:34.478008732Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.481450701Z 93 PC: 93f27 | File sharing functions
2018-12-17T23:12:34.483552343Z 42 PC: 9ec78 | Get date 0x9ec78: ret
0x9ec79: mov ax, 0x5700
0x9ec7c: call 0xaec72
0x9ec7f: and cx, 0x1f
0x9ec82: cmp cx, 0x1f
0x9ec85: je 0x9ec8b
0x9ec87: mov ax, 0
0x9ec8a: ret
0x9ec8b: mov ax, 0xbbbb
0x9ec8e: ret
0x9ec8f: cmp ax, 0xbbff
0x9ec92: jne 0x9ec98
0x9ec94: mov ax, 0xffbb
0x9ec97: iret
0x9ec98: pushaw
0x9ec99: pushf
0x9ec9a: cmp ah, 0x4b
0x9ec9d: je 0x9ecd3
0x9ec9f: cmp ah, 0x3d
0x9eca2: je 0x9ecd3
2018-12-17T23:12:34.486234367Z 10 PC: 93f39 | Buffered keyboard input