.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:59:15.944520488Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:59:15.946389231Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:59:15.947841431Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:59:15.949354574Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:59:15.95356062Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:59:15.95474311Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:59:15.956191965Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:59:15.958895145Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:59:15.960036385Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:59:15.961220072Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:59:15.963502158Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:59:15.964801659Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:59:15.96605411Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:59:15.968389797Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:59:15.970301173Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:59:15.971437384Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:59:15.973007813Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:59:15.977290158Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:59:15.978544764Z | 53 | PC: 1408a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:59:15.979695819Z | 37 | PC: 1409f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:59:15.981046395Z | 37 | PC: 140a7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:59:15.982096846Z | 37 | PC: 140af | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:59:15.983661251Z | 37 | PC: 140b7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:59:15.985973768Z | 68 | PC: 14fd6 | I/O control for devices (Set for = '���') |
| 2018-12-17T22:59:16.033387139Z | 37 | PC: 13801 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:59:16.034897323Z | 44 | PC: 1510d | Get time 0x1510d: mov word ptr [0x34a], cx 0x15111: mov word ptr [0x34c], dx 0x15115: retf 0x15116: call 0x1515d 0x15119: jb 0x1512a 0x1511b: mov cx, word ptr es:[di + 4] 0x1511f: cmp cx, 1 0x15122: je 0x1512a 0x15124: xor bx, bx 0x15126: push cs 0x15127: call 0x24c99 0x1512a: retf 4 0x1512d: call 0x1515d 0x15130: jb 0x15145 0x15132: mov ax, cx 0x15134: mov dx, bx 0x15136: mov cx, word ptr es:[di + 4] 0x1513a: cmp cx, 1 0x1513d: je 0x15145 0x1513f: xor bx, bx |
| 2018-12-17T22:59:16.037660548Z | 48 | PC: 14b01 | Get DOS version |
| 2018-12-17T22:59:16.039401625Z | 61 | PC: 149b3 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:59:16.046065301Z | 66 | PC: 14ae5 | Move file pointer |
| 2018-12-17T22:59:16.052618193Z | 63 | PC: 14a86 | Read file or device (Read 6 bytes on handle 5) |
| 2018-12-17T22:59:16.055523877Z | 62 | PC: 14a03 | Close file |
| 2018-12-17T22:59:16.058036397Z | 25 | PC: 14b8e | Get default drive |
| 2018-12-17T22:59:16.059480957Z | 71 | PC: 14ba1 | Get current directory |
| 2018-12-17T22:59:16.062302597Z | 25 | PC: 14b8e | Get default drive |
| 2018-12-17T22:59:16.063270475Z | 71 | PC: 14ba1 | Get current directory |
| 2018-12-17T22:59:16.066823192Z | 26 | PC: 13e9f | Set disk transfer address |
| 2018-12-17T22:59:16.067939337Z | 78 | PC: 13eab | Find first file |
| 2018-12-17T22:59:16.074603682Z | 26 | PC: 13ec3 | Set disk transfer address |
| 2018-12-17T22:59:16.076462429Z | 79 | PC: 13ec8 | Find next file |
| 2018-12-17T22:59:16.078892949Z | 26 | PC: 13e9f | Set disk transfer address |
| 2018-12-17T22:59:16.079838725Z | 78 | PC: 13eab | Find first file |
| 2018-12-17T22:59:16.082157754Z | 48 | PC: 14b01 | Get DOS version |
| 2018-12-17T22:59:16.094665055Z | 61 | PC: 149b3 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:59:16.100890616Z | 66 | PC: 15177 | Move file pointer |
| 2018-12-17T22:59:16.102714469Z | 66 | PC: 15185 | Move file pointer |
| 2018-12-17T22:59:16.103929164Z | 66 | PC: 15193 | Move file pointer |
| 2018-12-17T22:59:16.105229538Z | 62 | PC: 14a03 | Close file |
| 2018-12-17T22:59:16.107443695Z | 14 | PC: 14be7 | Set default drive (Drive = 'A') |
| 2018-12-17T22:59:16.108502628Z | 25 | PC: 14beb | Get default drive |
| 2018-12-17T22:59:16.109435884Z | 59 | PC: 14c55 | Change current directory |
| 2018-12-17T22:59:16.113748275Z | 48 | PC: 14b01 | Get DOS version |
| 2018-12-17T22:59:16.114926471Z | 26 | PC: 13e9f | Set disk transfer address |
| 2018-12-17T22:59:16.11580832Z | 78 | PC: 13eab | Find first file |
| 2018-12-17T22:59:16.122469623Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:59:16.123511369Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:59:16.124507871Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:59:16.126273198Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:59:16.127303108Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:59:16.128272741Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:59:16.129371007Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:59:16.131091214Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:59:16.132434353Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:59:16.133779005Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:59:16.13609119Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:59:16.137452809Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:59:16.138761841Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:59:16.140991122Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:59:16.142329127Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:59:16.143466977Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:59:16.144948994Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:59:16.145904861Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:59:16.146837432Z | 37 | PC: 141e1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:59:16.148168992Z | 76 | PC: 14220 | Terminate with return code (Return code = '0') |