.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:53:14.46977968Z | 53 | PC: 12b76 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:53:14.472218021Z | 78 | PC: 12ed4 | Find first file |
| 2018-12-17T22:53:14.476958301Z | 74 | PC: 12b99 | Reallocate memory |
| 2018-12-17T22:53:14.478600878Z | 72 | PC: 12ba1 | Allocate memory |
| 2018-12-17T22:53:14.481309142Z | 53 | PC: 12bcf | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:53:14.482827432Z | 37 | PC: 12bdf | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:53:20.454078809Z | 72 | PC: 8f1b9 | Allocate memory |
| 2018-12-17T22:53:20.456052954Z | 72 | PC: 8f1bd | Allocate memory |
| 2018-12-17T22:53:20.459623812Z | 99 | PC: 90858 | Get DBCS lead byte table pointer |
| 2018-12-17T22:53:20.4627262Z | 61 | PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS') |
| 2018-12-17T22:53:20.473184126Z | 66 | PC: 91f95 | Move file pointer |
| 2018-12-17T22:53:20.476124797Z | 62 | PC: 91fc1 | Close file |
| 2018-12-17T22:53:20.47854521Z | 75 | PC: 91fe0 | Execute program |
| 2018-12-17T22:53:20.493975494Z | 98 | PC: 916f1 | Get current PSP |
| 2018-12-17T22:53:20.496520231Z | 9 | PC: c605 | Display string (String= ' 6� � r�&;] u') |
| 2018-12-17T22:53:20.501145639Z | 48 | PC: c609 | Get DOS version |
| 2018-12-17T22:53:20.504530858Z | 9 | PC: c382 | Display string (String= ' Installed A20 handler number ') |
| 2018-12-17T22:53:20.508065447Z | 2 | PC: c38c | Character output (Char = '32') |
| 2018-12-17T22:53:20.510522493Z | 2 | PC: c3a7 | Character output (Char = '2e') |
| 2018-12-17T22:53:20.514073624Z | 9 | PC: c6d9 | Display string (String= '���� �VH�VD���V@������� �� ���� �_���Ku��t1��� ���� �D�����t �� ��������a 1��Z � �� � �W���� ����� �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-17T22:53:20.51890298Z | 9 | PC: c6e0 | Display string (String= ' �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-17T22:53:20.524622624Z | 61 | PC: 91f88 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE') |
| 2018-12-17T22:53:20.534610891Z | 66 | PC: 91f95 | Move file pointer |
| 2018-12-17T22:53:20.536228233Z | 62 | PC: 91fc1 | Close file |
| 2018-12-17T22:53:20.538879228Z | 75 | PC: 91fe0 | Execute program |
| 2018-12-17T22:53:20.560062315Z | 98 | PC: 916f1 | Get current PSP |
| 2018-12-17T22:53:20.563853072Z | 82 | PC: 13d46 | Get DOS internal pointers (SYSVARS) |
| 2018-12-17T22:53:20.56603206Z | 53 | PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-17T22:53:20.567375913Z | 37 | PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-17T22:53:20.568721411Z | 53 | PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:53:20.570849428Z | 37 | PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:53:20.572284827Z | 9 | PC: 13a0d | Display string (Could not find end pointer) |
| 2018-12-17T22:53:20.580090796Z | 62 | PC: 8f8eb | Close file |
| 2018-12-17T22:53:20.583405883Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.585968381Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.58746515Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.589630328Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.60682813Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.608520322Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.610233311Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.612290242Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.613999078Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.615736149Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.618085298Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.619727939Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.621392149Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.624083932Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.625746689Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.627404739Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.630403985Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.631825959Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.633208089Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.635344728Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.637082163Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.638767791Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.64070543Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.642934952Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.644595575Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.646269099Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.648922432Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.650596762Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.652275079Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.65491409Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:53:20.656584071Z | 61 | PC: 8f8ff | Open file (Filename = '') |
| 2018-12-17T22:53:20.661586213Z | 62 | PC: 8f90e | Close file |
| 2018-12-17T22:53:20.664218766Z | 69 | PC: 8f915 | Duplicate handle |
| 2018-12-17T22:53:20.666700171Z | 69 | PC: 8f919 | Duplicate handle |
| 2018-12-17T22:53:20.668457387Z | 61 | PC: 9387b | Open file (Filename = '') |
| 2018-12-17T22:53:20.673660309Z | 68 | PC: 9386b | I/O control for devices (Set for = '') |
| 2018-12-17T22:53:20.675315098Z | 61 | PC: 9387b | Open file (Filename = '') |
| 2018-12-17T22:53:20.680034591Z | 68 | PC: 9386b | I/O control for devices (Set for = '') |
| 2018-12-17T22:53:20.682531435Z | 74 | PC: 8f9c4 | Reallocate memory |
| 2018-12-17T22:53:20.684140475Z | 72 | PC: 8f9e0 | Allocate memory |
| 2018-12-17T22:53:20.686059585Z | 72 | PC: 8f9e4 | Allocate memory |
| 2018-12-17T22:53:20.688628182Z | 74 | PC: 8f9fb | Reallocate memory |
| 2018-12-17T22:53:20.690450227Z | 72 | PC: 8fa02 | Allocate memory |
| 2018-12-17T22:53:20.692352253Z | 72 | PC: 8fa06 | Allocate memory |
| 2018-12-17T22:53:20.694688439Z | 73 | PC: 8fa11 | Release memory |
| 2018-12-17T22:53:20.701986792Z | 73 | PC: 8efea | Release memory |
| 2018-12-17T22:53:20.714223751Z | 74 | PC: 8f003 | Reallocate memory |
| 2018-12-17T22:53:20.733561888Z | 72 | PC: 8f054 | Allocate memory |
| 2018-12-17T22:53:20.735592613Z | 72 | PC: 8f058 | Allocate memory |
| 2018-12-17T22:53:20.738126788Z | 73 | PC: 8f060 | Release memory |
| 2018-12-17T22:53:20.740507634Z | 61 | PC: 8f080 | Open file (Filename = '') |
| 2018-12-17T22:53:20.750071711Z | 63 | PC: 8f095 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:53:20.755442357Z | 66 | PC: 8f0ad | Move file pointer |
| 2018-12-17T22:53:20.757266097Z | 62 | PC: 8f0d1 | Close file |
| 2018-12-17T22:53:20.759335751Z | 75 | PC: 8f0f2 | Execute program |
| 2018-12-17T22:53:20.779410432Z | 80 | PC: 12be9 | Set current PSP |
| 2018-12-17T22:53:20.781167047Z | 48 | PC: 12bee | Get DOS version |
| 2018-12-17T22:53:20.782640547Z | 99 | PC: 193d0 | Get DBCS lead byte table pointer |
| 2018-12-17T22:53:20.784885894Z | 101 | PC: 12c74 | Get extended country info |
| 2018-12-17T22:53:20.786779092Z | 99 | PC: 12c7a | Get DBCS lead byte table pointer |
| 2018-12-17T22:53:20.788191223Z | 74 | PC: 12cdc | Reallocate memory |
| 2018-12-17T22:53:20.789878532Z | 72 | PC: 1355d | Allocate memory |
| 2018-12-17T22:53:20.79187115Z | 25 | PC: 13596 | Get default drive |
| 2018-12-17T22:53:20.793892143Z | 71 | PC: 135ad | Get current directory |
| 2018-12-17T22:53:20.796614751Z | 59 | PC: 135ba | Change current directory |
| 2018-12-17T22:53:20.80186096Z | 59 | PC: 135c8 | Change current directory |
| 2018-12-17T22:53:20.808660692Z | 59 | PC: 135d3 | Change current directory |
| 2018-12-17T22:53:20.812278855Z | 25 | PC: 12d13 | Get default drive |
| 2018-12-17T22:53:20.813700389Z | 37 | PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T22:53:20.815315342Z | 37 | PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:53:20.816372473Z | 37 | PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:53:20.818421185Z | 80 | PC: 1301d | Set current PSP |
| 2018-12-17T22:53:20.81985415Z | 37 | PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag') |
| 2018-12-17T22:53:20.82102369Z | 53 | PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:53:20.822310645Z | 37 | PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:53:20.82430006Z | 51 | PC: 13417 | Get or set Ctrl-Break |
| 2018-12-17T22:53:20.826386729Z | 72 | PC: 130ec | Allocate memory |
| 2018-12-17T22:53:20.828345236Z | 61 | PC: 131b2 | Open file (Filename = '') |
| 2018-12-17T22:53:20.835266043Z | 62 | PC: 131ba | Close file |
| 2018-12-17T22:53:20.837487702Z | 51 | PC: 1344c | Get or set Ctrl-Break |
| 2018-12-17T22:53:20.838755333Z | 74 | PC: 1197c | Reallocate memory |
| 2018-12-17T22:53:20.841294542Z | 72 | PC: 11991 | Allocate memory |
| 2018-12-17T22:53:20.843077488Z | 73 | PC: 119b2 | Release memory |
| 2018-12-17T22:53:20.844550542Z | 72 | PC: 119bd | Allocate memory |
| 2018-12-17T22:53:20.847121426Z | 73 | PC: 119df | Release memory |
| 2018-12-17T22:53:20.848891387Z | 72 | PC: 119f5 | Allocate memory |
| 2018-12-17T22:53:20.85078123Z | 72 | PC: 119fd | Allocate memory |