.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:45:42.357753283Z | 53 | PC: 144d6 | Get interrupt vector (Interrupt = '9' AKA 'Display string') |
| 2018-12-17T22:45:42.360574497Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.361983993Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.363333676Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.365638713Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: or al, 5 0x9f867: add byte ptr [si + 0x5112], dl |
| 2018-12-17T22:45:42.367961294Z | 48 | PC: 12a63 | Get DOS version |
| 2018-12-17T22:45:42.368953653Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.370284668Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.371242626Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.372062809Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [si - 0x6ee], dl |
| 2018-12-17T22:45:42.373836984Z | 9 | PC: 12a7a | Display string (String= ' --=[ Selfchecking AntiStealth Goat COM/EXE file, 01/06/01 ]=------------------ (c) 1995-2001 by ROSE SWE, Dipl.-Ing. Ralph Roth - Version 1.18 - Freeware ') |
| 2018-12-17T22:45:42.380507256Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.381651523Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.383267941Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.386881004Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + 0x12], bh |
| 2018-12-17T22:45:42.3893124Z | 61 | PC: 12cb7 | Open file (Filename = '') |
| 2018-12-17T22:45:42.396474392Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.398868823Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.400277976Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.401655441Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [si + 0x6712], dl |
| 2018-12-17T22:45:42.404553895Z | 9 | PC: 12a88 | Display string (String= 'Self test: ') |
| 2018-12-17T22:45:42.40704227Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.408526557Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.410692994Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.412089248Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [si - 0x31ee], dl |
| 2018-12-17T22:45:42.414505239Z | 93 | PC: 12b24 | File sharing functions |
| 2018-12-17T22:45:42.425754335Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.427257798Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.42872384Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.430812849Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [si + 0x7412], dl |
| 2018-12-17T22:45:42.433289782Z | 9 | PC: 12b03 | Display string (String= 'Size change=+0521h/01313d. Virus might be activ? ') |
| 2018-12-17T22:45:42.439016472Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.441398441Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.442967609Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.444497681Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [si + 0x7412], dl |
| 2018-12-17T22:45:42.451481927Z | 76 | PC: 12b09 | Terminate with return code (Return code = '1') |
| 2018-12-17T22:45:42.454884829Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.458637382Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.460917884Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.471424426Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.478617213Z | 77 | PC: 11fe0 | Get program return code |
| 2018-12-17T22:45:42.481345081Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.482696402Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.484130562Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.485798559Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.488538652Z | 72 | PC: 12174 | Allocate memory |
| 2018-12-17T22:45:42.490628556Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.4923455Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.494643792Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.496055955Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.498523634Z | 72 | PC: 1218d | Allocate memory |
| 2018-12-17T22:45:42.502095086Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.503561699Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.505009168Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.507436627Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.509878806Z | 37 | PC: 123c4 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T22:45:42.511404131Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.51382819Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.515263278Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.516662071Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.520154669Z | 37 | PC: 123cb | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:45:42.521682485Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.5231667Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.52556237Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.526682062Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.528810271Z | 37 | PC: 123d2 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.530693138Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.53224852Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.533381674Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.534766178Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.536401417Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.537787255Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.539278782Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.540351522Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.541371123Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.543820644Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.545287981Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.546325366Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.547749266Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.548759529Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.550867139Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.553101368Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.554107586Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.554952279Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.556778384Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.558795333Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.560219754Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.561784266Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.563488845Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.564412992Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.568108599Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.570446104Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.571802733Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.573758546Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.574698205Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.576590309Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.578461621Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.579710166Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.580976812Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.582749702Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.585537453Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.586916534Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.58860687Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.589969479Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.590910096Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.592922172Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.594059599Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.594994906Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.596640817Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.597842629Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.600043271Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.602351142Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.604651249Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.606041648Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.607712358Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.609826569Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.611402516Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.612859016Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.613954101Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.614975633Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.617557965Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.619118147Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.620376757Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.621844226Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.622917929Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.624942293Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.627329376Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.628258262Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.629434989Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.635352293Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.637517962Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.63898696Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.640481353Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.641614862Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.642646574Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.645531387Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.64720562Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.64849377Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.650522768Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.652286536Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.654973514Z | 62 | PC: 122ab | Close file |
| 2018-12-17T22:45:42.659414043Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.660828291Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.662308846Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.664490498Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.674362679Z | 99 | PC: 9a0a7 | Get DBCS lead byte table pointer |
| 2018-12-17T22:45:42.67592744Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.677904599Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.679351474Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.680734809Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.683717382Z | 56 | PC: 948c9 | Get or set country info |
| 2018-12-17T22:45:42.685898326Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.687315741Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.689499698Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.691008722Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.69339268Z | 64 | PC: 9a318 | Write file or device (Write 2 bytes on handle 1) |
| 2018-12-17T22:45:42.698606716Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.699718907Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.700800124Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.702551536Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.704630967Z | 25 | PC: 94932 | Get default drive |
| 2018-12-17T22:45:42.706188868Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.707617694Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.708764882Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.709818202Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.712367711Z | 71 | PC: 96bad | Get current directory |
| 2018-12-17T22:45:42.716201798Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.71730155Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.719158516Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.720270677Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.722320894Z | 64 | PC: 9a318 | Write file or device (Write 3 bytes on handle 1) |
| 2018-12-17T22:45:42.727003428Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.728415709Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.729865136Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.73209206Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.734178654Z | 2 | PC: 96b82 | Character output (Char = '3e') |
| 2018-12-17T22:45:42.736285685Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.739157752Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.740282456Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.741329027Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.745125146Z | 93 | PC: 949f0 | File sharing functions |
| 2018-12-17T22:45:42.747186604Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.748178001Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.75025297Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.751272269Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bx + 0x11], dl |
| 2018-12-17T22:45:42.753228696Z | 93 | PC: 949f7 | File sharing functions |
| 2018-12-17T22:45:42.755443879Z | 53 | PC: 9f6fd | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.756449835Z | 37 | PC: 9f715 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.772172858Z | 37 | PC: 9f838 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:45:42.775127965Z | 42 | PC: 9f840 | Get date 0x9f840: mov byte ptr cs:[0x195], dl 0x9f845: mov dx, 0xe 0x9f848: xor bx, bx 0x9f84a: mov es, bx 0x9f84c: cmp word ptr es:[0x84], dx 0x9f851: je 0x9f856 0x9f853: call 0x9f9f1 0x9f856: popf 0x9f857: pop ax 0x9f858: pop bx 0x9f859: pop cx 0x9f85a: pop dx 0x9f85b: pop si 0x9f85c: pop di 0x9f85d: pop bp 0x9f85e: pop ds 0x9f85f: pop es 0x9f860: ljmp ptr cs:[0xa] 0x9f865: adc word ptr [di], ax 0x9f867: add byte ptr [bp + di - 0x6c], dh |
| 2018-12-17T22:45:42.77725537Z | 10 | PC: 94a09 | Buffered keyboard input |