.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:59:39.570860425Z | 25 | PC: 12a79 | Get default drive |
| 2018-12-17T22:59:39.572326029Z | 71 | PC: 12a8b | Get current directory |
| 2018-12-17T22:59:39.575914252Z | 14 | PC: 12ab3 | Set default drive (Drive = 'C') |
| 2018-12-17T22:59:39.577289877Z | 59 | PC: 12abb | Change current directory |
| 2018-12-17T22:59:39.581037741Z | 78 | PC: 12b14 | Find first file |
| 2018-12-17T22:59:39.587776866Z | 79 | PC: 12b27 | Find next file |
| 2018-12-17T22:59:39.590395727Z | 59 | PC: 12ac6 | Change current directory |
| 2018-12-17T22:59:39.594119887Z | 78 | PC: 12ad1 | Find first file |
| 2018-12-17T22:59:39.60070915Z | 47 | PC: 12ae9 | Get disk transfer address |
| 2018-12-17T22:59:39.615016879Z | 59 | PC: 12afd | Change current directory |
| 2018-12-17T22:59:39.622247347Z | 78 | PC: 12b14 | Find first file |
| 2018-12-17T22:59:39.634074665Z | 61 | PC: 12b32 | Open file (Filename = 'EDIT.COM') |
| 2018-12-17T22:59:39.645321031Z | 63 | PC: 12b40 | Read file or device (Read 1280 bytes on handle 5) |
| 2018-12-17T22:59:39.651543344Z | 62 | PC: 12b44 | Close file |
| 2018-12-17T22:59:39.653946671Z | 67 | PC: 12b58 | Get or set file attributes |
| 2018-12-17T22:59:39.660211985Z | 67 | PC: 12b62 | Get or set file attributes |
| 2018-12-17T22:59:39.992914012Z | 61 | PC: 12b6b | Open file (Filename = 'EDIT.COM') |
| 2018-12-17T22:59:39.999271119Z | 87 | PC: 12b73 | Get or set file date and time |
| 2018-12-17T22:59:40.00622091Z | 66 | PC: 12b81 | Move file pointer |
| 2018-12-17T22:59:40.008285971Z | 66 | PC: 12ccd | Move file pointer |
| 2018-12-17T22:59:40.010261293Z | 64 | PC: 12b9d | Write file or device (Write 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.023735546Z | 64 | PC: 12bc4 | Write file or device (Write 56 bytes on handle 5) |
| 2018-12-17T22:59:40.031374432Z | 66 | PC: 12c0c | Move file pointer |
| 2018-12-17T22:59:40.034293177Z | 64 | PC: 12c18 | Write file or device (Write 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.050440824Z | 87 | PC: 12c20 | Get or set file date and time |
| 2018-12-17T22:59:40.052427457Z | 62 | PC: 12c24 | Close file |
| 2018-12-17T22:59:40.069420552Z | 14 | PC: 12cb7 | Set default drive (Drive = 'A') |
| 2018-12-17T22:59:40.072232768Z | 59 | PC: 12cbf | Change current directory |
| 2018-12-17T22:59:40.0775922Z | 42 | PC: 12c54 | Get date 0x12c54: mov ah, 0x2a 0x12c56: mov bl, byte ptr es:[0x422] 0x12c5b: mov dl, bl 0x12c5d: int 0x21 0x12c5f: mov ah, 0x2c 0x12c61: int 0x21 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl |
| 2018-12-17T22:59:40.080676256Z | 42 | PC: 12c5f | Get date 0x12c5f: mov ah, 0x2c 0x12c61: int 0x21 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a |
| 2018-12-17T22:59:40.085109217Z | 44 | PC: 12c63 | Get time 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a 0x12c88: mov bx, 1 0x12c8b: mov cx, 0x3c |
| 2018-12-17T22:59:40.087823087Z | 42 | PC: 12c69 | Get date 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a 0x12c88: mov bx, 1 0x12c8b: mov cx, 0x3c 0x12c8e: nop 0x12c8f: lea dx, word ptr [0x507] 0x12c93: int 0x21 |
| 2018-12-17T22:59:40.090706877Z | 42 | PC: 12ca8 | Get date 0x12ca8: mov ax, word ptr es:[0xfd00] 0x12cac: push ax 0x12cad: ret 0x12cae: mov ah, 0xe 0x12cb0: mov dl, byte ptr cs:[0x3e1] 0x12cb5: int 0x21 0x12cb7: mov ah, 0x3b 0x12cb9: lea dx, word ptr [0x3e2] 0x12cbd: int 0x21 0x12cbf: ret 0x12cc0: mov ah, 0x42 0x12cc2: mov al, 0 0x12cc4: mov dx, 0x500 0x12cc7: nop 0x12cc8: mov cx, 0 0x12ccb: int 0x21 0x12ccd: ret 0x12cce: add byte ptr [bx + di], al 0x12cd0: add byte ptr [bx + si], al 0x12cd2: or bp, word ptr [bp + si] |
| 2018-12-17T22:59:40.093469849Z | 25 | PC: 12a79 | Get default drive |
| 2018-12-17T22:59:40.096233403Z | 71 | PC: 12a8b | Get current directory |
| 2018-12-17T22:59:40.102111129Z | 14 | PC: 12ab3 | Set default drive (Drive = 'C') |
| 2018-12-17T22:59:40.103841581Z | 59 | PC: 12abb | Change current directory |
| 2018-12-17T22:59:40.109079656Z | 78 | PC: 12b14 | Find first file |
| 2018-12-17T22:59:40.116342725Z | 79 | PC: 12b27 | Find next file |
| 2018-12-17T22:59:40.119323136Z | 59 | PC: 12ac6 | Change current directory |
| 2018-12-17T22:59:40.124284791Z | 78 | PC: 12ad1 | Find first file |
| 2018-12-17T22:59:40.130991505Z | 47 | PC: 12ae9 | Get disk transfer address |
| 2018-12-17T22:59:40.132567226Z | 59 | PC: 12afd | Change current directory |
| 2018-12-17T22:59:40.139581989Z | 78 | PC: 12b14 | Find first file |
| 2018-12-17T22:59:40.146302038Z | 61 | PC: 12b32 | Open file (Filename = 'EDIT.COM') |
| 2018-12-17T22:59:40.153750276Z | 63 | PC: 12b40 | Read file or device (Read 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.159977138Z | 62 | PC: 12b44 | Close file |
| 2018-12-17T22:59:40.161806246Z | 79 | PC: 12b27 | Find next file |
| 2018-12-17T22:59:40.164316784Z | 61 | PC: 12b32 | Open file (Filename = 'FORMAT.COM') |
| 2018-12-17T22:59:40.17008813Z | 63 | PC: 12b40 | Read file or device (Read 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.175571455Z | 62 | PC: 12b44 | Close file |
| 2018-12-17T22:59:40.177134723Z | 67 | PC: 12b58 | Get or set file attributes |
| 2018-12-17T22:59:40.182653604Z | 67 | PC: 12b62 | Get or set file attributes |
| 2018-12-17T22:59:40.19213851Z | 61 | PC: 12b6b | Open file (Filename = 'FORMAT.COM') |
| 2018-12-17T22:59:40.201505514Z | 87 | PC: 12b73 | Get or set file date and time |
| 2018-12-17T22:59:40.203787763Z | 66 | PC: 12b81 | Move file pointer |
| 2018-12-17T22:59:40.206985272Z | 64 | PC: 12b9d | Write file or device (Write 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.214403483Z | 64 | PC: 12bc4 | Write file or device (Write 56 bytes on handle 5) |
| 2018-12-17T22:59:40.21688669Z | 66 | PC: 12c0c | Move file pointer |
| 2018-12-17T22:59:40.219068841Z | 64 | PC: 12c18 | Write file or device (Write 1280 bytes on handle 5) |
| 2018-12-17T22:59:40.225072954Z | 87 | PC: 12c20 | Get or set file date and time |
| 2018-12-17T22:59:40.226579686Z | 62 | PC: 12c24 | Close file |
| 2018-12-17T22:59:40.233332677Z | 14 | PC: 12cb7 | Set default drive (Drive = 'A') |
| 2018-12-17T22:59:40.235339679Z | 59 | PC: 12cbf | Change current directory |
| 2018-12-17T22:59:40.239784602Z | 42 | PC: 12c54 | Get date 0x12c54: mov ah, 0x2a 0x12c56: mov bl, byte ptr es:[0x422] 0x12c5b: mov dl, bl 0x12c5d: int 0x21 0x12c5f: mov ah, 0x2c 0x12c61: int 0x21 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl |
| 2018-12-17T22:59:40.242181587Z | 42 | PC: 12c5f | Get date 0x12c5f: mov ah, 0x2c 0x12c61: int 0x21 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a |
| 2018-12-17T22:59:40.245656387Z | 44 | PC: 12c63 | Get time 0x12c63: mov ah, 0xc 0x12c65: mov ah, 0x2a 0x12c67: int 0x21 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a 0x12c88: mov bx, 1 0x12c8b: mov cx, 0x3c |
| 2018-12-17T22:59:40.249791178Z | 42 | PC: 12c69 | Get date 0x12c69: or dl, 0x30 0x12c6c: and dl, bl 0x12c6e: cmp dl, al 0x12c70: jmp 0x12c99 0x12c72: mov bl, dl 0x12c74: mov ah, 0x2a 0x12c76: mov dl, 0x20 0x12c78: int 0x21 0x12c7a: mov dl, 0x3e 0x12c7c: int 0x21 0x12c7e: mov dl, bl 0x12c80: int 0x21 0x12c82: mov dl, 0x3c 0x12c84: int 0x21 0x12c86: mov ah, 0x2a 0x12c88: mov bx, 1 0x12c8b: mov cx, 0x3c 0x12c8e: nop 0x12c8f: lea dx, word ptr [0x507] 0x12c93: int 0x21 |
| 2018-12-17T22:59:40.252523393Z | 42 | PC: 12ca8 | Get date 0x12ca8: mov ax, word ptr es:[0xfd00] 0x12cac: push ax 0x12cad: ret 0x12cae: mov ah, 0xe 0x12cb0: mov dl, byte ptr cs:[0x3e1] 0x12cb5: int 0x21 0x12cb7: mov ah, 0x3b 0x12cb9: lea dx, word ptr [0x3e2] 0x12cbd: int 0x21 0x12cbf: ret 0x12cc0: mov ah, 0x42 0x12cc2: mov al, 0 0x12cc4: mov dx, 0x500 0x12cc7: nop 0x12cc8: mov cx, 0 0x12ccb: int 0x21 0x12ccd: ret 0x12cce: add byte ptr [bx + di], al 0x12cd0: add byte ptr [bp + 0x2a5f], bh 0x12cd4: arpl word ptr cs:[bx + 0x6d], bp |
| 2018-12-17T22:59:40.255963468Z | 51 | PC: 1344c | Get or set Ctrl-Break |