Sample viewer




Time Syscall Op Syscall Name
2018-12-17T21:55:40.207619482Z 47 PC: 12a72 | Get disk transfer address
2018-12-17T21:55:40.209137305Z 26 PC: 12a84 | Set disk transfer address
2018-12-17T21:55:40.21025009Z 25 PC: 12a93 | Get default drive
2018-12-17T21:55:40.211245903Z 14 PC: 12a9d | Set default drive (Drive = 'C')
2018-12-17T21:55:40.212854688Z 78 PC: 12aaa | Find first file
2018-12-17T21:55:40.218174272Z 67 PC: 12ad7 | Get or set file attributes
2018-12-17T21:55:40.223938332Z 67 PC: 12ae4 | Get or set file attributes
2018-12-17T21:55:40.56447239Z 61 PC: 12aec | Open file (Filename = 'COMMAND.COM')
2018-12-17T21:55:40.570861523Z 87 PC: 12af3 | Get or set file date and time
2018-12-17T21:55:40.572628407Z 44 PC: 12b01 | Get time 0x12b01: or dl, dl
0x12b03: je 0x12afd
0x12b05: mov byte ptr [bp + 0x18a], dl
0x12b09: mov ah, 0x3f
0x12b0b: lea dx, word ptr [bp + 0x158]
0x12b0f: mov cx, 3
0x12b12: int 0x21
0x12b14: mov ax, 0x4202
0x12b17: sub cx, cx
0x12b19: sub dx, dx
0x12b1b: int 0x21
0x12b1d: sub ax, 3
0x12b20: mov word ptr cs:[0xfb2d], ax
0x12b24: mov byte ptr cs:[0xfb2c], 0xe9
0x12b2a: lea si, word ptr [bp - 3]
0x12b2d: mov di, 0xfcbc
0x12b30: mov cx, 0x190
0x12b33: cld
0x12b34: rep movsb byte ptr es:[di], byte ptr [si]
0x12b36: mov si, 0xfcdc
2018-12-17T21:55:40.575158358Z 63 PC: 12b14 | Read file or device (Read 3 bytes on handle 5)
2018-12-17T21:55:40.57788877Z 66 PC: 12b1d | Move file pointer
2018-12-17T21:55:40.579480869Z 64 PC: 12b46 | Write file or device (Write 400 bytes on handle 5)
2018-12-17T21:55:40.585893211Z 66 PC: 12b4f | Move file pointer
2018-12-17T21:55:40.588093165Z 64 PC: 12b59 | Write file or device (Write 3 bytes on handle 5)
2018-12-17T21:55:40.591249983Z 87 PC: 12b6e | Get or set file date and time
2018-12-17T21:55:40.593124144Z 62 PC: 12b72 | Close file
2018-12-17T21:55:40.599748068Z 67 PC: 12b7f | Get or set file attributes
2018-12-17T21:55:40.609265514Z 26 PC: 12b8e | Set disk transfer address
2018-12-17T21:55:40.610432871Z 14 PC: 12b98 | Set default drive (Drive = 'A')