.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:20:36.024636926Z | 48 | PC: 143e5 | Get DOS version |
| 2018-12-17T22:20:36.026181356Z | 53 | PC: 14464 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:20:36.027463069Z | 37 | PC: 1449b | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:20:36.028623102Z | 48 | PC: 1451a | Get DOS version |
| 2018-12-17T22:20:36.030146579Z | 53 | PC: 14524 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.031244775Z | 37 | PC: 14539 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.032274824Z | 47 | PC: 1453f | Get disk transfer address |
| 2018-12-17T22:20:36.033694477Z | 26 | PC: 1454f | Set disk transfer address |
| 2018-12-17T22:20:36.034701898Z | 78 | PC: 14559 | Find first file |
| 2018-12-17T22:20:36.04074687Z | 53 | PC: 9ef50 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.041986228Z | 37 | PC: 9ef50 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.043094114Z | 67 | PC: 9ef50 | Get or set file attributes |
| 2018-12-17T22:20:36.048458865Z | 67 | PC: 9ef50 | Get or set file attributes |
| 2018-12-17T22:20:36.065174438Z | 61 | PC: 9ef50 | Open file (Filename = 'AIDSTEST.EXE') |
| 2018-12-17T22:20:36.071792031Z | 87 | PC: 9ef50 | Get or set file date and time |
| 2018-12-17T22:20:36.073403561Z | 66 | PC: 9ef50 | Move file pointer |
| 2018-12-17T22:20:36.074662378Z | 66 | PC: 9ef50 | Move file pointer |
| 2018-12-17T22:20:36.076986348Z | 63 | PC: 9ef50 | Read file or device (Read 28 bytes on handle 5) |
| 2018-12-17T22:20:36.079874402Z | 66 | PC: 9ef50 | Move file pointer |
| 2018-12-17T22:20:36.081256676Z | 63 | PC: 9ef50 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:20:36.089281474Z | 62 | PC: 9ef50 | Close file |
| 2018-12-17T22:20:36.091074664Z | 42 | PC: 9ef50 | Get date 0x9ef50: ret 0x9ef51: push ds 0x9ef52: pop es 0x9ef53: push ds 0x9ef54: pop word ptr cs:[0xfd4] 0x9ef59: mov word ptr cs:[0xfd2], dx 0x9ef5e: mov ax, 0x4300 0x9ef61: call 0xaef4a 0x9ef64: jb 0x9ef3b 0x9ef66: test cx, 0x1e 0x9ef6a: jne 0x9ef3b 0x9ef6c: mov word ptr cs:[0xfd8], cx 0x9ef71: and cx, 0xfe 0x9ef75: mov dx, word ptr cs:[0xfd2] 0x9ef7a: mov ax, 0x4301 0x9ef7d: call 0xaef4a 0x9ef80: jb 0x9ef3b 0x9ef82: mov dx, word ptr cs:[0xfd2] 0x9ef87: mov di, dx 0x9ef89: xor al, al |
| 2018-12-17T22:20:36.093145453Z | 37 | PC: 9ef50 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.095324963Z | 61 | PC: 14563 | Open file (Filename = '') |
| 2018-12-17T22:20:36.102412096Z | 62 | PC: 1456b | Close file |
| 2018-12-17T22:20:36.104147642Z | 79 | PC: 14577 | Find next file |
| 2018-12-17T22:20:36.106794553Z | 37 | PC: 14589 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:20:36.107878491Z | 26 | PC: 14592 | Set disk transfer address |
| 2018-12-17T22:20:36.108947387Z | 9 | PC: 12a5c | Display string (Could not find end pointer) |
| 2018-12-17T22:20:36.115570153Z | 76 | PC: 12a61 | Terminate with return code (Return code = '0') |