.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:52:42.313700467Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:52:42.315649508Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:52:42.317233414Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:52:42.3192016Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:52:42.334100147Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:52:42.33574152Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:52:42.337174802Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:52:42.339370948Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:52:42.341189033Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:52:42.34290669Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:52:42.345242488Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:52:42.346836512Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:52:42.348214801Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:52:42.350249022Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:52:42.351714154Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:52:42.352996693Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:52:42.354295303Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:52:42.356400418Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:52:42.358244632Z | 53 | PC: 1379a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:52:42.360102702Z | 37 | PC: 137af | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:52:42.362401821Z | 37 | PC: 137b7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:52:42.364118736Z | 37 | PC: 137bf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:52:42.365873502Z | 37 | PC: 137c7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:52:42.368868538Z | 68 | PC: 14674 | I/O control for devices (Set for = '') |
| 2018-12-17T22:52:42.371277003Z | 44 | PC: 147ab | Get time 0x147ab: mov word ptr [0x4c], cx 0x147af: mov word ptr [0x4e], dx 0x147b3: retf 0x147b4: call 0x147fb 0x147b7: jb 0x147c8 0x147b9: mov cx, word ptr es:[di + 4] 0x147bd: cmp cx, 1 0x147c0: je 0x147c8 0x147c2: xor bx, bx 0x147c4: push cs 0x147c5: call 0x24337 0x147c8: retf 4 0x147cb: call 0x147fb 0x147ce: jb 0x147e3 0x147d0: mov ax, cx 0x147d2: mov dx, bx 0x147d4: mov cx, word ptr es:[di + 4] 0x147d8: cmp cx, 1 0x147db: je 0x147e3 0x147dd: xor bx, bx |
| 2018-12-17T22:52:42.374243135Z | 48 | PC: 14285 | Get DOS version |
| 2018-12-17T22:52:42.377711931Z | 61 | PC: 140c3 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:52:42.384731507Z | 66 | PC: 14815 | Move file pointer |
| 2018-12-17T22:52:42.386518263Z | 66 | PC: 14823 | Move file pointer |
| 2018-12-17T22:52:42.389200682Z | 66 | PC: 14831 | Move file pointer |
| 2018-12-17T22:52:42.390957342Z | 66 | PC: 141f5 | Move file pointer |
| 2018-12-17T22:52:42.392773734Z | 63 | PC: 14196 | Read file or device (Read 1030 bytes on handle 5) |
| 2018-12-17T22:52:42.408908934Z | 42 | PC: 134d7 | Get date 0x134d7: xor ah, ah 0x134d9: les di, ptr [bp + 6] 0x134dc: stosw word ptr es:[di], ax 0x134dd: mov al, dl 0x134df: les di, ptr [bp + 0xa] 0x134e2: stosw word ptr es:[di], ax 0x134e3: mov al, dh 0x134e5: les di, ptr [bp + 0xe] 0x134e8: stosw word ptr es:[di], ax 0x134e9: xchg ax, cx 0x134ea: les di, ptr [bp + 0x12] 0x134ed: stosw word ptr es:[di], ax 0x134ee: pop bp 0x134ef: retf 0x10 0x134f2: push bp 0x134f3: mov bp, sp 0x134f5: mov cx, word ptr [bp + 0xa] 0x134f8: mov dh, byte ptr [bp + 8] 0x134fb: mov dl, byte ptr [bp + 6] 0x134fe: mov ah, 0x2b |
| 2018-12-17T22:52:42.412229782Z | 54 | PC: 1354c | Get free disk space |
| 2018-12-17T22:52:42.414225921Z | 64 | PC: 13e1b | Write file or device (Write 2 bytes on handle 1) |
| 2018-12-17T22:52:42.419774344Z | 64 | PC: 13e1b | Write file or device (Write 0 bytes on handle 1) |
| 2018-12-17T22:52:42.421668543Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:52:42.422988602Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:52:42.424466529Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:52:42.426188543Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:52:42.427543418Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:52:42.429063584Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:52:42.431199406Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:52:42.433013353Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:52:42.434730579Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:52:42.436475547Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:52:42.438471657Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:52:42.440423724Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:52:42.442059507Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:52:42.443555988Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:52:42.446051134Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:52:42.447509995Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:52:42.448913111Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:52:42.45135065Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:52:42.452747534Z | 37 | PC: 138f1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:52:42.454077001Z | 76 | PC: 13930 | Terminate with return code (Return code = '0') |