.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:40:32.798985609Z | 47 | PC: 1bc48 | Get disk transfer address |
| 2018-12-17T22:40:32.801164752Z | 53 | PC: 1bc8c | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:40:32.818931191Z | 72 | PC: 1c32d | Allocate memory |
| 2018-12-17T22:40:32.821163233Z | 42 | PC: 1d915 | Get date 0x1d915: dec bl 0x1d917: mov word ptr [4], cx 0x1d91b: mov word ptr [6], dx 0x1d91f: mov ax, 0x5800 0x1d922: sub di, sp 0x1d924: shr ax, 1 0x1d926: add byte ptr cs:[0xc028], bh 0x1d92b: or bl, 0x68 0x1d92e: js 0x1d939 0x1d932: and bl, 0x64 0x1d935: mov bl, 0x87 0x1d937: and bh, dh 0x1d939: sub di, word ptr [0x7b2] 0x1d93d: xor bh, 0x2b 0x1d940: int 0x21 0x1d942: sbb word ptr [4], cx 0x1d946: xor word ptr [6], dx 0x1d94a: popaw 0x1d94b: sti 0x1d94c: ret |
| 2018-12-17T22:40:32.824678616Z | 44 | PC: 1d942 | Get time 0x1d942: sbb word ptr [4], cx 0x1d946: xor word ptr [6], dx 0x1d94a: popaw 0x1d94b: sti 0x1d94c: ret 0x1d94d: int1 0x1d94e: pushaw 0x1d94f: mov cx, ax 0x1d951: mov bx, word ptr [4] 0x1d955: push ss 0x1d956: pop bp 0x1d957: cmp si, ax 0x1d959: mov di, di 0x1d95b: in ax, 0x40 0x1d95d: sub di, word ptr cs:[0x821] 0x1d962: ror si, 1 0x1d964: sub ax, word ptr [6] 0x1d968: xor ax, bx 0x1d96a: neg di 0x1d96c: adc ax, dx |
| 2018-12-17T22:40:32.82776325Z | 37 | PC: 1be3d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:40:32.829456631Z | 26 | PC: 1be51 | Set disk transfer address |
| 2018-12-17T22:40:32.831938502Z | 78 | PC: 1c3a2 | Find first file |
| 2018-12-17T22:40:32.838717334Z | 54 | PC: 1fd81 | Get free disk space |
| 2018-12-17T22:40:32.848824848Z | 67 | PC: 1fe33 | Get or set file attributes |
| 2018-12-17T22:40:32.867306361Z | 61 | PC: 1fe4e | Open file (Filename = 'TEST.EXE') |
| 2018-12-17T22:40:32.874715817Z | 63 | PC: 1fe90 | Read file or device (Read 32 bytes on handle 5) |
| 2018-12-17T22:40:32.878415537Z | 87 | PC: 20206 | Get or set file date and time |
| 2018-12-17T22:40:32.881301948Z | 62 | PC: 20213 | Close file |
| 2018-12-17T22:40:32.911248705Z | 67 | PC: 20237 | Get or set file attributes |
| 2018-12-17T22:40:32.922689894Z | 79 | PC: 1c3a2 | Find next file |
| 2018-12-17T22:40:32.931951089Z | 71 | PC: 1bf1b | Get current directory |
| 2018-12-17T22:40:32.936459857Z | 59 | PC: 1c01d | Change current directory |
| 2018-12-17T22:40:32.942992888Z | 73 | PC: 1c25c | Release memory |
| 2018-12-17T22:40:32.944920969Z | 37 | PC: 1c16d | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:40:32.958020443Z | 26 | PC: 1c18c | Set disk transfer address |
| 2018-12-17T22:40:32.960385074Z | 42 | PC: 1da53 | Get date 0x1da53: push bx 0x1da54: sub cx, cx 0x1da56: ror cl, cl 0x1da58: mov bh, ah 0x1da5a: jle 0x1da5e 0x1da5e: or byte ptr cs:[0xc3f0], bl 0x1da63: pop si 0x1da64: rol bx, 1 0x1da66: jmp 0x1daae 0x1da69: cmp word ptr cs:[0xbea3], bx 0x1da6e: mov bl, 0xdb 0x1da70: mov ax, si 0x1da72: mov di, es 0x1da74: mov al, ch 0x1da76: xchg dh, ch 0x1da78: xor dl, byte ptr cs:[0xf3aa] 0x1da7d: sub bp, word ptr ss:[0x127b] 0x1da82: sbb di, 0xee0b 0x1da86: add cx, 0x41a 0x1da8a: mov si, ss |
| 2018-12-17T22:40:32.983835921Z | 48 | PC: 1a4ba | Get DOS version |
| 2018-12-17T22:40:32.98623136Z | 74 | PC: 1a518 | Reallocate memory |
| 2018-12-17T22:40:32.988560825Z | 48 | PC: 1a588 | Get DOS version |
| 2018-12-17T22:40:32.990317324Z | 53 | PC: 1a590 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:40:32.992939128Z | 37 | PC: 1a5a2 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:40:32.995076292Z | 68 | PC: 1a626 | I/O control for devices (Set for = '������������~�vzj') |
| 2018-12-17T22:40:32.99710853Z | 68 | PC: 1a626 | I/O control for devices (Set for = '��+���f��e��e�F�V�>�e') |
| 2018-12-17T22:40:33.010226227Z | 68 | PC: 1a626 | I/O control for devices (Set for = 't�') |
| 2018-12-17T22:40:33.012292197Z | 68 | PC: 1a626 | I/O control for devices (Set for = '�u � ��! ��!�O �V����') |
| 2018-12-17T22:40:33.014229205Z | 68 | PC: 1a626 | I/O control for devices (Set for = '�u � ��! ��!�O �V����') |
| 2018-12-17T22:40:33.029912913Z | 72 | PC: 1d17b | Allocate memory |
| 2018-12-17T22:40:33.033517694Z | 53 | PC: 1b536 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:40:33.03551745Z | 37 | PC: 1b54b | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:40:33.041551623Z | 64 | PC: 1af03 | Write file or device (Write 70 bytes on handle 2) |
| 2018-12-17T22:40:33.052838062Z | 64 | PC: 1af03 | Write file or device (Write 25 bytes on handle 2) |
| 2018-12-17T22:40:33.058504926Z | 37 | PC: 1a6bd | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:40:33.06091358Z | 76 | PC: 1a6a6 | Terminate with return code (Return code = '1') |