Sample viewer

vx.netlux.org/Virus.DOS.Baran.3294

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:17.891529219Z 75 PC: 12d03 | Execute program
2018-12-17T22:47:17.893386999Z 82 PC: 12d5f | Get DOS internal pointers (SYSVARS)
2018-12-17T22:47:17.899340254Z 88 PC: 12db7 | case 0xGet or set allocation strateg:
2018-12-17T22:47:17.900933464Z 88 PC: 12dc9 | case 0xGet or set allocation strateg:
2018-12-17T22:47:17.902611573Z 72 PC: 12dd0 | Allocate memory
2018-12-17T22:47:17.905677574Z 74 PC: 12dde | Reallocate memory
2018-12-17T22:47:17.908613101Z 74 PC: 12de6 | Reallocate memory
2018-12-17T22:47:17.910300207Z 72 PC: 12ded | Allocate memory
2018-12-17T22:47:17.913355901Z 88 PC: 12dfa | case 0xGet or set allocation strateg:
2018-12-17T22:47:17.915517489Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.918198188Z 76 PC: 9f367 | Terminate with return code (Return code = '221')
2018-12-17T22:47:17.921690829Z 75 PC: 11821 | Execute program
2018-12-17T22:47:17.939537511Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.942558273Z 76 PC: 12a45 | Terminate with return code (Return code = '0')
2018-12-17T22:47:17.946553511Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.950461436Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:47:17.952270908Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.955147893Z 72 PC: 12174 | Allocate memory
2018-12-17T22:47:17.957979876Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.960841657Z 72 PC: 1218d | Allocate memory
2018-12-17T22:47:17.963653342Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.970892343Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:47:17.975440997Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.97876241Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:17.982007764Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.987067689Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:17.989222947Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:17.992945602Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:17.994778047Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:17.9969618Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.000449891Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.002227146Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.004505334Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.006655772Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.011609176Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.013382386Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.01589182Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.020372573Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.027981465Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.030359542Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.033111835Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.035665302Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.038693375Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.041352137Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.043805492Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.045930474Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.048407623Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.050871821Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.052675445Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.054945853Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.056522487Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.058100904Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.059964032Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.061708272Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.06318305Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.06439803Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.066366732Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.067984525Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.069327918Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.082321549Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.085300853Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.087203578Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.089943425Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.091610801Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.098166697Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.100118206Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.101554845Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.103303265Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.104674799Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.1069551Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.108131969Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.109350415Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.121728389Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.123029303Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.12420641Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.125916498Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.127675882Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.129418831Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.131591251Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.133122727Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.134507201Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.1366461Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.138420826Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.139955552Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.146052796Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.150551363Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.152537968Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.155618853Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.158002769Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.160433313Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.164540946Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.17564354Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.178142881Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.180797316Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.183400493Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.185681264Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.188189938Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.192022404Z 69 PC: 9fa8c | Duplicate handle
2018-12-17T22:47:18.194453465Z 62 PC: 9f3e4 | Close file
2018-12-17T22:47:18.196935714Z 68 PC: 9fa8c | I/O control for devices (Set for = '͸U�@@�Y���')
2018-12-17T22:47:18.199890036Z 62 PC: 9fa8c | Close file
2018-12-17T22:47:18.204031647Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.207109454Z 99 PC: 99887 | Get DBCS lead byte table pointer
2018-12-17T22:47:18.209622517Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.212693019Z 56 PC: 940a9 | Get or set country info
2018-12-17T22:47:18.215903182Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.219476325Z 64 PC: 99af8 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:47:18.225722375Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.228854238Z 25 PC: 94112 | Get default drive
2018-12-17T22:47:18.231813233Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.234512605Z 71 PC: 9638d | Get current directory
2018-12-17T22:47:18.239134553Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.243380336Z 64 PC: 99af8 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:47:18.247661456Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.250353618Z 2 PC: 96362 | Character output (Char = '3e')
2018-12-17T22:47:18.254033005Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.257243229Z 93 PC: 941d0 | File sharing functions
2018-12-17T22:47:18.259751398Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.263049Z 93 PC: 941d7 | File sharing functions
2018-12-17T22:47:18.265937042Z 44 PC: 9fa8c | Get time 0x9fa8c: cld
0x9fa8d: ret
0x9fa8e: pushf
0x9fa8f: pop cx
0x9fa90: and ch, 0xfe
0x9fa93: push cx
0x9fa94: popf
0x9fa95: ret
0x9fa96: pushf
0x9fa97: pop cx
0x9fa98: or ch, 1
0x9fa9b: push cx
0x9fa9c: popf
0x9fa9d: ret
0x9fa9e: inc cx
0x9fa9f: cmp bl, byte ptr [si + 0x54]
0x9faa2: inc bp
0x9faa3: push bx
0x9faa4: push sp
0x9faa5: inc bx
2018-12-17T22:47:18.26896238Z 10 PC: 941e9 | Buffered keyboard input