Sample viewer

vx.netlux.org/Virus.DOS.Serbu.3322.d

.

GIF

Syscalls:

Time Syscall Op Syscall Name
2018-12-17T22:47:22.6476307Z 98 PC: 3573b | Get current PSP
2018-12-17T22:47:22.650938745Z 88 PC: 3597c | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.652417743Z 88 PC: 35988 | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.65420983Z 72 PC: 3598e | Allocate memory
2018-12-17T22:47:22.655972582Z 74 PC: 359a0 | Reallocate memory
2018-12-17T22:47:22.657329532Z 88 PC: 35988 | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.659464743Z 72 PC: 3598e | Allocate memory
2018-12-17T22:47:22.661146632Z 88 PC: 359bd | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.662727061Z 88 PC: 359c2 | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.664716018Z 42 PC: 362c9 | Get date 0x362c9: sti
0x362ca: ret
0x362cb: cli
0x362cc: pushf
0x362cd: lcall 0x19:0x44bd
0x362d2: sti
0x362d3: ret
0x362d4: add word ptr [di], ax
0x362d6: and byte ptr ds:[bp + si + 0x4c], al
0x362db: sub ax, 0x3339
0x362de: xor word ptr [bx + di], si
0x362e0: xor ax, 0x3c20
0x362e3: cmp al, 0
0x362e5: add dh, bh
0x362e7: add ax, 0xc1d5
0x362ea: rcl byte ptr [di - 0x697d], cl
0x362ee: xchg ax, di
0x362ef: xchg ax, cx
0x362f0: cwde
0x362f1: xchg ax, bx
2018-12-17T22:47:22.684907533Z 48 PC: 3fd40 | Get DOS version
2018-12-17T22:47:22.686521876Z 74 PC: 3fdc1 | Reallocate memory
2018-12-17T22:47:22.689390415Z 72 PC: 42f7f | Allocate memory
2018-12-17T22:47:22.692970691Z 74 PC: 42c47 | Reallocate memory
2018-12-17T22:47:22.695633094Z 53 PC: 3fe53 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:22.697822968Z 37 PC: 3fe65 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:22.699400852Z 68 PC: 3feec | I/O control for devices (Set for = '�8')
2018-12-17T22:47:22.700904227Z 68 PC: 3feec | I/O control for devices (Set for = '�� �FދV�RP�FڋV�RP�l9(%����j�')
2018-12-17T22:47:22.703563834Z 68 PC: 3feec | I/O control for devices (Set for = ';�w2+��ىN��F�')
2018-12-17T22:47:22.705349779Z 68 PC: 3feec | I/O control for devices (Set for = 'P�F�P�*R&�r')
2018-12-17T22:47:22.707334859Z 68 PC: 3feec | I/O control for devices (Set for = 'P�F�P�*R&�r')
2018-12-17T22:47:22.711869137Z 42 PC: 4332b | Get date 0x4332b: push ds
0x4332c: lds bx, ptr [bp + 6]
0x4332f: mov word ptr [bx + 2], cx
0x43332: mov byte ptr [bx + 1], dh
0x43335: mov byte ptr [bx], dl
0x43337: mov byte ptr [bx + 4], al
0x4333a: pop ds
0x4333b: xor ax, ax
0x4333d: pop bp
0x4333e: retf
0x4333f: add byte ptr [0x8b57], al
0x43343: clc
0x43344: add di, bx
0x43346: mov word ptr [bx + 4], di
0x43349: dec di
0x4334a: dec di
0x4334b: sub ax, 0x16
0x4334e: lea si, word ptr [bx + 0x14]
0x43351: mov word ptr [di], 0xfffe
0x43355: mov word ptr [bx + 0xa], di
2018-12-17T22:47:22.714252174Z 44 PC: 417fb | Get time 0x417fb: push ds
0x417fc: lds bx, ptr [bp + 6]
0x417ff: mov byte ptr [bx], ch
0x41801: mov byte ptr [bx + 1], cl
0x41804: mov byte ptr [bx + 2], dh
0x41807: mov byte ptr [bx + 3], dl
0x4180a: pop ds
0x4180b: xor ax, ax
0x4180d: pop bp
0x4180e: retf
0x4180f: add byte ptr [di - 0x75], dl
0x41812: in al, dx
0x41813: les dx, ptr [bp + 6]
0x41816: mov word ptr [0x4c9a], es
0x4181a: mov word ptr [0x4c98], dx
0x4181e: push ds
0x4181f: mov ax, cs
0x41821: mov ds, ax
0x41823: mov dx, 0xc613
0x41826: mov al, 0x24
2018-12-17T22:47:22.717345145Z 48 PC: 321ce | Get DOS version
2018-12-17T22:47:22.721046509Z 47 PC: 4171a | Get disk transfer address
2018-12-17T22:47:22.72244147Z 26 PC: 4171e | Set disk transfer address
2018-12-17T22:47:22.723728247Z 47 PC: 9fa71 | Get disk transfer address
2018-12-17T22:47:22.725822061Z 78 PC: 9fa71 | Find first file
2018-12-17T22:47:22.732849173Z 26 PC: 41739 | Set disk transfer address
2018-12-17T22:47:22.734948768Z 25 PC: 417e7 | Get default drive
2018-12-17T22:47:22.737138672Z 71 PC: 32921 | Get current directory
2018-12-17T22:47:22.742357967Z 47 PC: 4171a | Get disk transfer address
2018-12-17T22:47:22.743951211Z 26 PC: 4171e | Set disk transfer address
2018-12-17T22:47:22.746522121Z 47 PC: 9fa71 | Get disk transfer address
2018-12-17T22:47:22.748109684Z 78 PC: 9fa71 | Find first file
2018-12-17T22:47:22.754577806Z 26 PC: 41739 | Set disk transfer address
2018-12-17T22:47:22.759013539Z 47 PC: 4171a | Get disk transfer address
2018-12-17T22:47:22.76059997Z 26 PC: 4171e | Set disk transfer address
2018-12-17T22:47:22.762301687Z 47 PC: 9fa71 | Get disk transfer address
2018-12-17T22:47:22.765051192Z 78 PC: 9fa71 | Find first file
2018-12-17T22:47:22.776833969Z 26 PC: 41739 | Set disk transfer address
2018-12-17T22:47:22.778684466Z 25 PC: 417e7 | Get default drive
2018-12-17T22:47:22.7818056Z 48 PC: 321ce | Get DOS version
2018-12-17T22:47:22.784660093Z 61 PC: 9fa71 | Open file (Filename = '')
2018-12-17T22:47:22.792515681Z 2 PC: 32281 | Character output (Char = '55')
2018-12-17T22:47:22.796054519Z 2 PC: 32281 | Character output (Char = '6e')
2018-12-17T22:47:22.798503791Z 2 PC: 32281 | Character output (Char = '61')
2018-12-17T22:47:22.80088274Z 2 PC: 32281 | Character output (Char = '62')
2018-12-17T22:47:22.803837852Z 2 PC: 32281 | Character output (Char = '6c')
2018-12-17T22:47:22.806755805Z 2 PC: 32281 | Character output (Char = '65')
2018-12-17T22:47:22.809695227Z 2 PC: 32281 | Character output (Char = '20')
2018-12-17T22:47:22.812734117Z 2 PC: 32281 | Character output (Char = '74')
2018-12-17T22:47:22.81547727Z 2 PC: 32281 | Character output (Char = '6f')
2018-12-17T22:47:22.817867891Z 2 PC: 32281 | Character output (Char = '20')
2018-12-17T22:47:22.820165187Z 2 PC: 32281 | Character output (Char = '72')
2018-12-17T22:47:22.822650086Z 2 PC: 32281 | Character output (Char = '65')
2018-12-17T22:47:22.825488619Z 2 PC: 32281 | Character output (Char = '61')
2018-12-17T22:47:22.828109553Z 2 PC: 32281 | Character output (Char = '64')
2018-12-17T22:47:22.831695129Z 2 PC: 32281 | Character output (Char = '20')
2018-12-17T22:47:22.834308539Z 2 PC: 32281 | Character output (Char = '6d')
2018-12-17T22:47:22.837190213Z 2 PC: 32281 | Character output (Char = '65')
2018-12-17T22:47:22.840186181Z 2 PC: 32281 | Character output (Char = '73')
2018-12-17T22:47:22.842723929Z 2 PC: 32281 | Character output (Char = '73')
2018-12-17T22:47:22.845958746Z 2 PC: 32281 | Character output (Char = '61')
2018-12-17T22:47:22.848406605Z 2 PC: 32281 | Character output (Char = '67')
2018-12-17T22:47:22.851081822Z 2 PC: 32281 | Character output (Char = '65')
2018-12-17T22:47:22.854686093Z 2 PC: 32281 | Character output (Char = '20')
2018-12-17T22:47:22.857468631Z 2 PC: 32281 | Character output (Char = '66')
2018-12-17T22:47:22.860147865Z 2 PC: 32281 | Character output (Char = '69')
2018-12-17T22:47:22.863963563Z 2 PC: 32281 | Character output (Char = '6c')
2018-12-17T22:47:22.86742189Z 2 PC: 32281 | Character output (Char = '65')
2018-12-17T22:47:22.870462903Z 37 PC: 3ffb5 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate')
2018-12-17T22:47:22.872870737Z 76 PC: 3ff9a | Terminate with return code (Return code = '0')
2018-12-17T22:47:22.876366074Z 37 PC: 9f268 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:47:22.878052442Z 88 PC: 9f270 | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.880879875Z 72 PC: 9f277 | Allocate memory
2018-12-17T22:47:22.883216334Z 73 PC: 9f287 | Release memory
2018-12-17T22:47:22.885036594Z 88 PC: 9f28e | case 0xGet or set allocation strateg:
2018-12-17T22:47:22.887468333Z 73 PC: 9f294 | Release memory
2018-12-17T22:47:22.889343806Z 72 PC: 9f2b9 | Allocate memory
2018-12-17T22:47:22.895208835Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:47:22.898095458Z 72 PC: 12174 | Allocate memory
2018-12-17T22:47:22.900097349Z 72 PC: 1218d | Allocate memory
2018-12-17T22:47:22.901908101Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:47:22.904347264Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:22.906200105Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:22.908039Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.910406908Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.912439517Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.914218069Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.916974828Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.918736427Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.921193603Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.923485639Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.925601966Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.928278063Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.931172191Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.93304008Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.935679168Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.937331433Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.939184424Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.94329684Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.945545213Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.947424594Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.950340132Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.952287992Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.954718037Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.957938127Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.960258086Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.963066582Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.966180823Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.9682334Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.970561874Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.9731097Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.975202973Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:22.976881376Z 62 PC: 122ab | Close file
2018-12-17T22:47:22.980825917Z 61 PC: 13601 | Open file (Filename = '')
2018-12-17T22:47:22.987329426Z 68 PC: 13601 | I/O control for devices (Set for = '')
2018-12-17T22:47:22.98922655Z 53 PC: 13404 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:22.991539676Z 37 PC: 135db | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:22.993172073Z 69 PC: 13429 | Duplicate handle
2018-12-17T22:47:22.994784221Z 63 PC: 13231 | Read file or device (Read 26 bytes on handle 6)
2018-12-17T22:47:22.997290309Z 66 PC: 13261 | Move file pointer
2018-12-17T22:47:22.998798984Z 87 PC: 13319 | Get or set file date and time
2018-12-17T22:47:23.000986574Z 64 PC: 135ef | Write file or device (Write 3322 bytes on handle 6)
2018-12-17T22:47:23.345299017Z 66 PC: 1332b | Move file pointer
2018-12-17T22:47:23.347161687Z 64 PC: 13334 | Write file or device (Write 26 bytes on handle 6)
2018-12-17T22:47:23.351280415Z 62 PC: 13438 | Close file
2018-12-17T22:47:23.359903145Z 37 PC: 13460 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:23.361705311Z 62 PC: 13015 | Close file
2018-12-17T22:47:23.36946066Z 61 PC: 13601 | Open file (Filename = '')
2018-12-17T22:47:23.377943047Z 68 PC: 13601 | I/O control for devices (Set for = '')
2018-12-17T22:47:23.380071456Z 63 PC: 13601 | Read file or device (Read 29 bytes on handle 5)
2018-12-17T22:47:23.38485364Z 66 PC: 12372 | Move file pointer
2018-12-17T22:47:23.387726728Z 63 PC: 12383 | Read file or device (Read 44693 bytes on handle 5)
2018-12-17T22:47:23.403606742Z 62 PC: 1238a | Close file
2018-12-17T22:47:23.408909245Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T22:47:23.411151026Z 56 PC: 94df9 | Get or set country info
2018-12-17T22:47:23.414130594Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:47:23.420087706Z 25 PC: 94e62 | Get default drive
2018-12-17T22:47:23.422449383Z 71 PC: 970dd | Get current directory
2018-12-17T22:47:23.427702973Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:47:23.432586217Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T22:47:23.435707301Z 93 PC: 94f20 | File sharing functions
2018-12-17T22:47:23.437965704Z 93 PC: 94f27 | File sharing functions
2018-12-17T22:47:23.442141649Z 10 PC: 94f39 | Buffered keyboard input
2018-12-17T22:47:37.631898501Z 0 PC: 0 | Program terminate
2018-12-17T22:47:38.986200959Z 0 PC: 0 | Program terminate
2018-12-17T22:47:39.089672532Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:47:39.096271539Z 41 PC: 94fae | Parse filename
2018-12-17T22:47:39.099186255Z 41 PC: 9502f | Parse filename
2018-12-17T22:47:39.10253145Z 41 PC: 9504c | Parse filename
2018-12-17T22:47:39.104961335Z 26 PC: 984f7 | Set disk transfer address
2018-12-17T22:47:39.10784881Z 71 PC: 986f3 | Get current directory
2018-12-17T22:47:39.116304195Z 47 PC: 13601 | Get disk transfer address
2018-12-17T22:47:39.117608215Z 78 PC: 13601 | Find first file
2018-12-17T22:47:39.129443891Z 71 PC: 9856c | Get current directory
2018-12-17T22:47:39.133278655Z 73 PC: 97c09 | Release memory
2018-12-17T22:47:39.135496471Z 61 PC: 13601 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:47:39.143533241Z 87 PC: 13601 | Get or set file date and time
2018-12-17T22:47:39.145285082Z 62 PC: 13601 | Close file
2018-12-17T22:47:39.147368436Z 53 PC: 13601 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:39.149786258Z 37 PC: 135db | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:39.15126723Z 67 PC: 13354 | Get or set file attributes
2018-12-17T22:47:39.157207731Z 67 PC: 1335d | Get or set file attributes
2018-12-17T22:47:39.177049107Z 61 PC: 13364 | Open file (Filename = 'A:\PRINT.COM')
2018-12-17T22:47:39.185026974Z 63 PC: 13231 | Read file or device (Read 26 bytes on handle 5)
2018-12-17T22:47:39.192644015Z 66 PC: 13261 | Move file pointer
2018-12-17T22:47:39.194747407Z 62 PC: 1337e | Close file
2018-12-17T22:47:39.197121187Z 67 PC: 1338a | Get or set file attributes
2018-12-17T22:47:39.21069624Z 37 PC: 13391 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:39.212271449Z 75 PC: 11821 | Execute program
2018-12-17T22:47:39.224414753Z 9 PC: 138a7 | Display string (String= 'Hello, World! ')
2018-12-17T22:47:39.23112025Z 76 PC: 138ab | Terminate with return code (Return code = '36')
2018-12-17T22:47:39.234740161Z 77 PC: 11fe0 | Get program return code
2018-12-17T22:47:39.236578424Z 72 PC: 12174 | Allocate memory
2018-12-17T22:47:39.239860721Z 72 PC: 1218d | Allocate memory
2018-12-17T22:47:39.241981355Z 37 PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write')
2018-12-17T22:47:39.243556344Z 37 PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records')
2018-12-17T22:47:39.246256177Z 37 PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number')
2018-12-17T22:47:39.248287252Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.251626666Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.254907179Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.256571416Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.259088024Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.261595635Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.263879335Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.26636805Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.269767537Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.281570041Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.284011968Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.286677286Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.288714593Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.290439804Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.293603428Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.295625948Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.297608412Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.300104642Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.302230536Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.30451089Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.307900969Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.309837226Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.312124364Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.315085236Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.31737122Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.319486344Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.323073443Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.325242218Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.327893789Z 68 PC: 13601 | I/O control for devices (Set for = 'mfyW� Wv W�Wj W� WcW� W�W W5W')
2018-12-17T22:47:39.331922017Z 62 PC: 122ab | Close file
2018-12-17T22:47:39.335736534Z 99 PC: 9a5d7 | Get DBCS lead byte table pointer
2018-12-17T22:47:39.338281475Z 56 PC: 94df9 | Get or set country info
2018-12-17T22:47:39.343276238Z 64 PC: 9a848 | Write file or device (Write 2 bytes on handle 1)
2018-12-17T22:47:39.348529618Z 25 PC: 94e62 | Get default drive
2018-12-17T22:47:39.35172436Z 71 PC: 970dd | Get current directory
2018-12-17T22:47:39.356931753Z 64 PC: 9a848 | Write file or device (Write 3 bytes on handle 1)
2018-12-17T22:47:39.360646412Z 2 PC: 970b2 | Character output (Char = '3e')
2018-12-17T22:47:39.36613849Z 93 PC: 94f20 | File sharing functions
2018-12-17T22:47:39.368210172Z 93 PC: 94f27 | File sharing functions
2018-12-17T22:47:39.37139203Z 10 PC: 94f39 | Buffered keyboard input