.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:55:26.101227345Z | 48 | PC: 13427 | Get DOS version |
| 2018-12-17T22:55:26.102512055Z | 53 | PC: 134a6 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:55:26.104458474Z | 37 | PC: 134dd | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:55:26.105929582Z | 48 | PC: 13562 | Get DOS version |
| 2018-12-17T22:55:26.107359734Z | 53 | PC: 1356c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.138102193Z | 37 | PC: 13581 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.139894157Z | 47 | PC: 13587 | Get disk transfer address |
| 2018-12-17T22:55:26.141626764Z | 26 | PC: 13597 | Set disk transfer address |
| 2018-12-17T22:55:26.144428329Z | 78 | PC: 135a1 | Find first file |
| 2018-12-17T22:55:26.151919077Z | 53 | PC: 9ef99 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.153645899Z | 37 | PC: 9ef99 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.155381747Z | 67 | PC: 9ef99 | Get or set file attributes |
| 2018-12-17T22:55:26.162868374Z | 67 | PC: 9ef99 | Get or set file attributes |
| 2018-12-17T22:55:26.182103738Z | 61 | PC: 9ef99 | Open file (Filename = 'AIDS617.EXE') |
| 2018-12-17T22:55:26.1901366Z | 87 | PC: 9ef99 | Get or set file date and time |
| 2018-12-17T22:55:26.193491273Z | 66 | PC: 9ef99 | Move file pointer |
| 2018-12-17T22:55:26.195270794Z | 66 | PC: 9ef99 | Move file pointer |
| 2018-12-17T22:55:26.19718753Z | 63 | PC: 9ef99 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T22:55:26.202012927Z | 62 | PC: 9ef99 | Close file |
| 2018-12-17T22:55:26.210277296Z | 42 | PC: 9ef99 | Get date 0x9ef99: ret 0x9ef9a: push ds 0x9ef9b: pop es 0x9ef9c: push ds 0x9ef9d: pop word ptr cs:[0xeb8] 0x9efa2: mov word ptr cs:[0xeb6], dx 0x9efa7: mov ax, 0x4300 0x9efaa: call 0xaef93 0x9efad: jb 0x9ef7e 0x9efaf: test cx, 0x1e 0x9efb3: jne 0x9ef7e 0x9efb5: mov word ptr cs:[0xebc], cx 0x9efba: and cx, 0xfe 0x9efbe: mov dx, word ptr cs:[0xeb6] 0x9efc3: mov ax, 0x4301 0x9efc6: call 0xaef93 0x9efc9: jb 0x9ef7e 0x9efcb: mov dx, word ptr cs:[0xeb6] 0x9efd0: mov di, dx 0x9efd2: xor al, al |
| 2018-12-17T22:55:26.213131459Z | 37 | PC: 9ef99 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.216697425Z | 61 | PC: 135ab | Open file (Filename = '>�ZMt �>�MZt뎃>�') |
| 2018-12-17T22:55:26.224582453Z | 62 | PC: 135b3 | Close file |
| 2018-12-17T22:55:26.227029354Z | 79 | PC: 135bf | Find next file |
| 2018-12-17T22:55:26.2303119Z | 37 | PC: 135d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:55:26.243191904Z | 26 | PC: 135da | Set disk transfer address |
| 2018-12-17T22:55:26.244956453Z | 76 | PC: 12c17 | Terminate with return code (Return code = '0') |