Sample viewer

vx.netlux.org/Virus.DOS.Cybercide.1307

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:20:54.536372185Z 221 PC: 12a49 | UNKNOWN!
2018-12-17T22:20:54.538402365Z 53 PC: 12a58 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:20:54.541519479Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-17T22:20:54.546355173Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.549201882Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:20:54.551984094Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.554727136Z 72 PC: 12174 | Allocate memory
2018-12-17T22:20:54.557078162Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.560833001Z 72 PC: 1218d | Allocate memory
2018-12-17T22:20:54.563751886Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.566559972Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:20:54.5685944Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.57187573Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:20:54.573616804Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.576422869Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:20:54.582897836Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.585516888Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.58813999Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.595357217Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.598844974Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.601502172Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.626303988Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.628940115Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.631561026Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.638095973Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.645714362Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.648443725Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.651398345Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.65417943Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.656460109Z 62 PC: 9fb05 | Close file
2018-12-17T22:20:54.659866964Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.663071392Z 99 PC: 99f97 | Get DBCS lead byte table pointer
2018-12-17T22:20:54.66552991Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.66882706Z 56 PC: 947b9 | Get or set country info
2018-12-17T22:20:54.671095236Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.674119879Z 64 PC: 9a208 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:20:54.67937308Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.681801265Z 25 PC: 94822 | Get default drive
2018-12-17T22:20:54.68953947Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.693018654Z 71 PC: 96a9d | Get current directory
2018-12-17T22:20:54.697868285Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.701243969Z 64 PC: 9a208 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:20:54.704917822Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.707384672Z 2 PC: 96a72 | Character output (Char = '3e')
2018-12-17T22:20:54.71046308Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.713149831Z 93 PC: 948e0 | File sharing functions
2018-12-17T22:20:54.7153942Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.718598382Z 93 PC: 948e7 | File sharing functions
2018-12-17T22:20:54.721663539Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-17T22:20:54.724987678Z 10 PC: 948f9 | Buffered keyboard input

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":0,"Second":0,"TimeBased":true,"OriginalID":3638,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:46.14649619Z 221 PC: 12a49 | UNKNOWN!
2018-12-25T11:49:46.14801323Z 53 PC: 12a58 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:46.149274749Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:46.152823639Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-25T11:49:46.155325348Z 77 PC: 11fe0 | Get program return code
2018-12-25T11:49:46.156782479Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.158894973Z 72 PC: 12174 | Allocate memory
2018-12-25T11:49:46.160652201Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.163099891Z 72 PC: 1218d | Allocate memory
2018-12-25T11:49:46.165336071Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.167560312Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:49:46.172569594Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.175533414Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:49:46.179530905Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.184211297Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:46.186341471Z 62 PC: 9fb05 | Close file
2018-12-25T11:49:46.1887065Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.191094413Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.193345281Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.194904256Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.196328414Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.198509207Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.200525001Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.202560849Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.20518072Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.207274665Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.209267237Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.211858983Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.21392088Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.21580692Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.220119027Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.222413706Z 99 PC: 99f97 | Get DBCS lead byte table pointer
2018-12-25T11:49:46.223770433Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.226234212Z 56 PC: 947b9 | Get or set country info
2018-12-25T11:49:46.229059758Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.231124546Z 64 PC: 9a208 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T11:49:46.236686827Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.239072818Z 25 PC: 94822 | Get default drive
2018-12-25T11:49:46.240888957Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.244061935Z 71 PC: 96a9d | Get current directory
2018-12-25T11:49:46.248318894Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.250564534Z 64 PC: 9a208 | Write file or device (See above)
2018-12-25T11:49:46.254010589Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.256412323Z 2 PC: 96a72 | Character output (Char = '3e')
2018-12-25T11:49:46.258782263Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.261010493Z 93 PC: 948e0 | File sharing functions
2018-12-25T11:49:46.263653627Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.265933092Z 93 PC: 948e7 | File sharing functions
2018-12-25T11:49:46.267910283Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.270898964Z 10 PC: 948f9 | Buffered keyboard input

{"DateBased":false,"Day":0,"Month":0,"Year":0,"Hour":0,"Min":1,"Second":0,"TimeBased":true,"OriginalID":3638,"SideJobID":0}

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-25T11:49:46.23049818Z 221 PC: 12a49 | UNKNOWN!
2018-12-25T11:49:46.231880994Z 53 PC: 12a58 | Get interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:46.23329741Z 37 PC: 12a95 | Set interrupt vector (Interrupt = '33' AKA 'Random read')
2018-12-25T11:49:46.236095696Z 44 PC: 9f7fc | Get time 0x9f7fc: cmp cl, 0
0x9f7ff: je 0x9f78b
0x9f801: pop dx
0x9f802: pop cx
0x9f803: pop ax
0x9f804: cmp ah, 0x36
0x9f807: jne 0x9f80f
0x9f809: push bp
0x9f80a: mov bp, 0x32b
0x9f80d: jmp bp
0x9f80f: popf
0x9f810: ljmp 0x19:0x40f8
0x9f815: push bp
0x9f816: mov bp, 0x413
0x9f819: jmp bp
0x9f81b: push bp
0x9f81c: mov bp, 0x49a
0x9f81f: jmp bp
0x9f821: push bp
0x9f822: mov bp, 0x548
2018-12-25T11:49:46.238187694Z 77 PC: 11fe0 | Get program return code
2018-12-25T11:49:46.240836505Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.243547914Z 72 PC: 12174 | Allocate memory
2018-12-25T11:49:46.245872306Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.249410818Z 72 PC: 1218d | Allocate memory
2018-12-25T11:49:46.251886821Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.254407445Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-25T11:49:46.256298462Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.258751612Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-25T11:49:46.260107782Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.263068798Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-25T11:49:46.264950313Z 62 PC: 9fb05 | Close file
2018-12-25T11:49:46.267192935Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.269929494Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.273104943Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.275593089Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.279153594Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.28789666Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.290297109Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.292835349Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.295507891Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.297651509Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.299841232Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.302586281Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.304992999Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.307224116Z 62 PC: 9fb05 | Close file (See above)
2018-12-25T11:49:46.316377703Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.318823192Z 99 PC: 99f97 | Get DBCS lead byte table pointer
2018-12-25T11:49:46.320253263Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.323350524Z 56 PC: 947b9 | Get or set country info
2018-12-25T11:49:46.325819237Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.328196258Z 64 PC: 9a208 | Write file or device (Write 2 bytes on handle 1)
2018-12-25T11:49:46.332002538Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.334411837Z 25 PC: 94822 | Get default drive
2018-12-25T11:49:46.336255011Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.339228554Z 71 PC: 96a9d | Get current directory
2018-12-25T11:49:46.343663134Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.346034295Z 64 PC: 9a208 | Write file or device (See above)
2018-12-25T11:49:46.35038287Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.352947031Z 2 PC: 96a72 | Character output (Char = '3e')
2018-12-25T11:49:46.355417546Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.359024691Z 93 PC: 948e0 | File sharing functions
2018-12-25T11:49:46.361605567Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.365297008Z 93 PC: 948e7 | File sharing functions
2018-12-25T11:49:46.368125266Z 44 PC: 9f7fc | Get time (See above)
2018-12-25T11:49:46.37060462Z 10 PC: 948f9 | Buffered keyboard input