.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:06:35.29022605Z | 48 | PC: 157fc | Get DOS version |
| 2018-12-17T23:06:35.29210231Z | 53 | PC: 1587b | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T23:06:35.293542518Z | 37 | PC: 158b2 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T23:06:35.294913332Z | 48 | PC: 15952 | Get DOS version |
| 2018-12-17T23:06:35.296837947Z | 53 | PC: 1595c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.297960032Z | 37 | PC: 15971 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.298982323Z | 47 | PC: 15977 | Get disk transfer address |
| 2018-12-17T23:06:35.300650814Z | 26 | PC: 15987 | Set disk transfer address |
| 2018-12-17T23:06:35.309673456Z | 78 | PC: 15991 | Find first file |
| 2018-12-17T23:06:35.316039527Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.318720829Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.31992729Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.325496124Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.353769811Z | 61 | PC: 9ef87 | Open file (Filename = '5KE.EXE') |
| 2018-12-17T23:06:35.361167361Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.362553799Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.364221116Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.366505266Z | 63 | PC: 9ef87 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:35.369818849Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.371550332Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:35.382515646Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:35.3848292Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:35.387373935Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.395175794Z | 61 | PC: 1599b | Open file (Filename = '') |
| 2018-12-17T23:06:35.402531055Z | 62 | PC: 159a3 | Close file |
| 2018-12-17T23:06:35.404400499Z | 79 | PC: 159af | Find next file |
| 2018-12-17T23:06:35.408962815Z | 37 | PC: 159c1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.410232063Z | 26 | PC: 159ca | Set disk transfer address |
| 2018-12-17T23:06:35.412860834Z | 48 | PC: 14981 | Get DOS version |
| 2018-12-17T23:06:35.415080909Z | 48 | PC: 14a9d | Get DOS version |
| 2018-12-17T23:06:35.416280975Z | 53 | PC: 14aa7 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.417767077Z | 37 | PC: 14abc | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.419750407Z | 47 | PC: 14ac2 | Get disk transfer address |
| 2018-12-17T23:06:35.421247365Z | 26 | PC: 14ad2 | Set disk transfer address |
| 2018-12-17T23:06:35.422584679Z | 78 | PC: 14adc | Find first file |
| 2018-12-17T23:06:35.431374928Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.432814169Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.43438377Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.440521064Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.451606948Z | 61 | PC: 9ef87 | Open file (Filename = ' . a ����*.EXE') |
| 2018-12-17T23:06:35.460426583Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.463237Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.465096492Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.466887729Z | 63 | PC: 9ef87 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:35.470541507Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.472541411Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:35.475266905Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:35.477898551Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:35.480374519Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.482444836Z | 61 | PC: 14ae6 | Open file (Filename = '') |
| 2018-12-17T23:06:35.490479179Z | 62 | PC: 14aee | Close file |
| 2018-12-17T23:06:35.493029455Z | 79 | PC: 14afa | Find next file |
| 2018-12-17T23:06:35.49561503Z | 37 | PC: 14b0c | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.497794573Z | 26 | PC: 14b15 | Set disk transfer address |
| 2018-12-17T23:06:35.500302065Z | 26 | PC: 13c84 | Set disk transfer address |
| 2018-12-17T23:06:35.501717074Z | 71 | PC: 13d32 | Get current directory |
| 2018-12-17T23:06:35.5055928Z | 78 | PC: 13d5b | Find first file |
| 2018-12-17T23:06:35.51154376Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:35.522656597Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.546067792Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.548211586Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.549524099Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.557326679Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.568082843Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:35.575130424Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.576962987Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.580388045Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.581719489Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:35.588484135Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.590879751Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:35.600112954Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.601560608Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.616275131Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.61775638Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:35.62533327Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:35.62843113Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.630171581Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:35.636646821Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:35.638778821Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:35.641341151Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.644500298Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.649363937Z | 64 | PC: 13e25 | Write file or device (Write 1459 bytes on handle 5) |
| 2018-12-17T23:06:35.658019735Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.659412381Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.66312738Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:35.664645979Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.675287867Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:35.682343509Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:35.685543707Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:35.687933733Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:35.69176461Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.698755107Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.699640353Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.700916954Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.718631869Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.725505279Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:35.734107712Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.735899299Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.737701348Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.740300492Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:35.747257894Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.749292594Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:35.758272999Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.760724286Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.767429792Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.769458967Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:35.778617134Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:35.781530334Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.78417034Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:35.791792805Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:35.793456057Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:35.796204916Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.800552466Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.803891775Z | 64 | PC: 13e25 | Write file or device (Write 1462 bytes on handle 5) |
| 2018-12-17T23:06:35.812903078Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.81477462Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.817704945Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:35.819128849Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.830311224Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:35.837870385Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:35.840825934Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:35.847145782Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.8584471Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.859677445Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.861948809Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.867957268Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:35.877680169Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:35.884924984Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.887197046Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.888769997Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.89122861Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:35.898099624Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.900407142Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:35.910174567Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:35.911622666Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.918608711Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:35.920660034Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:35.928407567Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:35.930619373Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:35.933560897Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:35.939281647Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:35.940541577Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:35.943111332Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.946512485Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.950160101Z | 64 | PC: 13e25 | Write file or device (Write 1462 bytes on handle 5) |
| 2018-12-17T23:06:35.959110644Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:35.960566959Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:35.965142624Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:35.96713912Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:35.97777279Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:35.984674406Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:35.988932731Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:35.995605057Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.005592237Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.00761983Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.008736535Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.014507318Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.027054802Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:36.033326428Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.03463782Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.036509436Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.037848743Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.044362967Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.046697903Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:36.056191436Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.058074861Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.065172337Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.066692806Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.07523088Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.077857099Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.079874461Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:36.087254978Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:36.088693743Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.091370128Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.095795654Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.099074146Z | 64 | PC: 13e25 | Write file or device (Write 1453 bytes on handle 5) |
| 2018-12-17T23:06:36.107904155Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.110818667Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.113728042Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:36.115837281Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.12854551Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:36.135472047Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:36.138435474Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:36.145557114Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.155610692Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.156840513Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.159003771Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.165707618Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.178440629Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:36.191047345Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.193088456Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.194820424Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.19725804Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.203958733Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.20600989Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:36.216114459Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.21780438Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.224277708Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.22635689Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.234166367Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.236646127Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.238924966Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:36.24572537Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:36.247972301Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.251695929Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.255172632Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.258520194Z | 64 | PC: 13e25 | Write file or device (Write 1458 bytes on handle 5) |
| 2018-12-17T23:06:36.268924653Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.270473315Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.273292266Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:36.275726291Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.286276804Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:36.29080435Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:36.293803902Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:36.297957996Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.305299774Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.307212628Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.308313845Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.31641618Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.329497998Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:36.336490584Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.338757199Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.340871579Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.342479329Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.34967299Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.351867938Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:36.362186322Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.363775209Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.370826141Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.372200408Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.380150641Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.382534205Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.38417962Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:36.391150074Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:36.392622001Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.396104636Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.400120117Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.403490872Z | 64 | PC: 13e25 | Write file or device (Write 1456 bytes on handle 5) |
| 2018-12-17T23:06:36.412425253Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.414467925Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.417216135Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:36.418975204Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.430359192Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:36.437665973Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:36.441473036Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:36.448366757Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.458557436Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.459990768Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.462535944Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.468869736Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.478491969Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:36.485779375Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.487178059Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.488521885Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.49016089Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.494880904Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.496117325Z | 64 | PC: 9ef87 | Write file or device (Write 3441 bytes on handle 5) |
| 2018-12-17T23:06:36.502834525Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.50384459Z | 64 | PC: 9ef87 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.50879941Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.510784946Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.517068709Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.519543544Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.521482894Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:36.530745707Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:36.532790767Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.535905714Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.539096859Z | 64 | PC: 13e1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.542619282Z | 64 | PC: 13e25 | Write file or device (Write 1461 bytes on handle 5) |
| 2018-12-17T23:06:36.551634797Z | 66 | PC: 13e5a | Move file pointer |
| 2018-12-17T23:06:36.553012137Z | 64 | PC: 13e30 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:06:36.556509638Z | 87 | PC: 13e3d | Get or set file date and time |
| 2018-12-17T23:06:36.558340113Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.569181838Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:36.576578659Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:36.579564995Z | 67 | PC: 13db0 | Get or set file attributes |
| 2018-12-17T23:06:36.585385662Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.596591824Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.597882774Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.599278406Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.605693279Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.615387249Z | 61 | PC: 9ef87 | Open file (Filename = '���') |
| 2018-12-17T23:06:36.622043053Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.62394372Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.625287159Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.627023782Z | 63 | PC: 9ef87 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.633268236Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.634616563Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.642108652Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.643881626Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.646181779Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.649098425Z | 61 | PC: 13dbd | Open file (Filename = '') |
| 2018-12-17T23:06:36.656161122Z | 87 | PC: 13dc8 | Get or set file date and time |
| 2018-12-17T23:06:36.657463947Z | 63 | PC: 13de0 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.660746542Z | 67 | PC: 13e4e | Get or set file attributes |
| 2018-12-17T23:06:36.67170096Z | 62 | PC: 13e47 | Close file |
| 2018-12-17T23:06:36.673996895Z | 79 | PC: 13d68 | Find next file |
| 2018-12-17T23:06:36.67653681Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.67776519Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.679705331Z | 47 | PC: 9ef87 | Get disk transfer address |
| 2018-12-17T23:06:36.680825971Z | 26 | PC: 9ef87 | Set disk transfer address |
| 2018-12-17T23:06:36.682164756Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.688563562Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.694305934Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.700282224Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.707769588Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.71862863Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.730002755Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.732800404Z | 60 | PC: 9ef87 | Create or truncate file |
| 2018-12-17T23:06:36.74359285Z | 64 | PC: 9ef87 | Write file or device (Write 254 bytes on handle 5) |
| 2018-12-17T23:06:36.748535009Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.756962597Z | 78 | PC: 9ef87 | Find first file |
| 2018-12-17T23:06:36.762547794Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.764126055Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.765146251Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.768661858Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.777599363Z | 61 | PC: 9ef87 | Open file (Filename = 'TEST.EXE') |
| 2018-12-17T23:06:36.787801865Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.792486582Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.795227014Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.796547831Z | 63 | PC: 9ef87 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.802920797Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.805310725Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.812244446Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.815796277Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.817958612Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.819606712Z | 61 | PC: 9ef18 | Open file (Filename = '�x�c��D�tx�_�dǫ8AJ�x̔ê �_�x�5mϬ_�x��5��}_�x�jˮd��cŴ^�x��d㪞W_�]�x�� �_�x�n������� �#�����$���� �� ���;��������') |
| 2018-12-17T23:06:36.825007854Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.826528448Z | 26 | PC: 9ef87 | Set disk transfer address |
| 2018-12-17T23:06:36.828301963Z | 59 | PC: 13d43 | Change current directory |
| 2018-12-17T23:06:36.834395472Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.836647504Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.838003598Z | 47 | PC: 9ef87 | Get disk transfer address |
| 2018-12-17T23:06:36.841607717Z | 26 | PC: 9ef87 | Set disk transfer address |
| 2018-12-17T23:06:36.843151243Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.852531129Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.859752698Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.868575485Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.873819019Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.879714794Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.885726222Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.888054843Z | 60 | PC: 9ef87 | Create or truncate file |
| 2018-12-17T23:06:36.909660002Z | 64 | PC: 9ef87 | Write file or device (Write 254 bytes on handle 5) |
| 2018-12-17T23:06:36.914885583Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.924755905Z | 78 | PC: 9ef87 | Find first file |
| 2018-12-17T23:06:36.931276928Z | 53 | PC: 9ef87 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.932523927Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.935657373Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.941707365Z | 67 | PC: 9ef87 | Get or set file attributes |
| 2018-12-17T23:06:36.951658678Z | 61 | PC: 9ef87 | Open file (Filename = 'TEST.EXE') |
| 2018-12-17T23:06:36.959405099Z | 87 | PC: 9ef87 | Get or set file date and time |
| 2018-12-17T23:06:36.961559005Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.963283689Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.96552389Z | 63 | PC: 9ef87 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T23:06:36.971876765Z | 66 | PC: 9ef87 | Move file pointer |
| 2018-12-17T23:06:36.973340612Z | 63 | PC: 9ef87 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:06:36.980221844Z | 62 | PC: 9ef87 | Close file |
| 2018-12-17T23:06:36.982291967Z | 42 | PC: 9ef87 | Get date 0x9ef87: ret 0x9ef88: push ds 0x9ef89: pop es 0x9ef8a: push ds 0x9ef8b: pop word ptr cs:[0xe86] 0x9ef90: mov word ptr cs:[0xe84], dx 0x9ef95: mov ax, 0x4300 0x9ef98: call 0xaef81 0x9ef9b: jb 0x9ef72 0x9ef9d: test cx, 0x1e 0x9efa1: jne 0x9ef72 0x9efa3: mov word ptr cs:[0xe8a], cx 0x9efa8: and cx, 0xfe 0x9efac: mov dx, word ptr cs:[0xe84] 0x9efb1: mov ax, 0x4301 0x9efb4: call 0xaef81 0x9efb7: jb 0x9ef72 0x9efb9: mov dx, word ptr cs:[0xe84] 0x9efbe: mov di, dx 0x9efc0: xor al, al |
| 2018-12-17T23:06:36.984922181Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.987386118Z | 61 | PC: 9ef18 | Open file (Filename = '�x�c��D�tx�_�dǫ8AJ�x̔ê �_�x�5mϬ_�x��5��}_�x�jˮd��cŴ^�x��d㪞W_�]�x�� �_�x�n������� �#�����$���� �� ���;��������') |
| 2018-12-17T23:06:36.991935793Z | 37 | PC: 9ef87 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:06:36.993560874Z | 26 | PC: 9ef87 | Set disk transfer address |
| 2018-12-17T23:06:36.994614947Z | 59 | PC: 13d51 | Change current directory |
| 2018-12-17T23:06:36.998857494Z | 26 | PC: 13cc5 | Set disk transfer address |
| 2018-12-17T23:06:37.000652984Z | 9 | PC: 12a5c | Display string (Could not find end pointer) |
| 2018-12-17T23:06:37.006632089Z | 76 | PC: 12a61 | Terminate with return code (Return code = '0') |