.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:03:30.694002661Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:03:30.69579062Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:03:30.699895969Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:03:30.701310394Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:03:30.703407481Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:03:30.706241249Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:03:30.710444904Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:03:30.712916391Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:03:30.714438142Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:03:30.717126668Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:03:30.71830496Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:03:30.72026276Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:03:30.72165048Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:03:30.723006697Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:03:30.727678526Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:03:30.728814699Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:03:30.729919285Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:03:30.732279843Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:03:30.73358759Z | 53 | PC: 13bfa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:03:30.734956148Z | 37 | PC: 13c0f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:03:30.741527156Z | 37 | PC: 13c17 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:03:30.742611586Z | 37 | PC: 13c1f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:03:30.743649433Z | 37 | PC: 13c27 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:03:30.755582338Z | 68 | PC: 14aa5 | I/O control for devices (Set for = '') |
| 2018-12-17T22:03:30.859750671Z | 37 | PC: 13231 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:03:30.861530924Z | 44 | PC: 14bdc | Get time 0x14bdc: mov word ptr [0x3e], cx 0x14be0: mov word ptr [0x40], dx 0x14be4: retf 0x14be5: mov bx, sp 0x14be7: mov dx, ds 0x14be9: lds si, ptr ss:[bx + 0xa] 0x14bed: les di, ptr ss:[bx + 6] 0x14bf1: mov cx, word ptr ss:[bx + 4] 0x14bf5: cld 0x14bf6: cmp si, di 0x14bf8: jae 0x14c01 0x14bfa: add si, cx 0x14bfc: add di, cx 0x14bfe: dec si 0x14bff: dec di 0x14c00: std 0x14c01: rep movsb byte ptr es:[di], byte ptr [si] 0x14c03: cld 0x14c04: mov ds, dx 0x14c06: retf 0xa |
| 2018-12-17T22:03:30.864999345Z | 25 | PC: 14772 | Get default drive |
| 2018-12-17T22:03:30.867181861Z | 71 | PC: 14785 | Get current directory |
| 2018-12-17T22:03:30.871095094Z | 26 | PC: 13977 | Set disk transfer address |
| 2018-12-17T22:03:30.874254969Z | 78 | PC: 13983 | Find first file |
| 2018-12-17T22:03:30.881482924Z | 48 | PC: 146e5 | Get DOS version |
| 2018-12-17T22:03:30.883547694Z | 61 | PC: 14523 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:03:30.891077659Z | 66 | PC: 14655 | Move file pointer |
| 2018-12-17T22:03:30.89295689Z | 63 | PC: 145f6 | Read file or device (Read 9312 bytes on handle 5) |
| 2018-12-17T22:03:30.900891856Z | 60 | PC: 14523 | Create or truncate file |
| 2018-12-17T22:03:31.596395975Z | 63 | PC: 145f6 | Read file or device (Read 36000 bytes on handle 5) |
| 2018-12-17T22:03:31.599854174Z | 62 | PC: 14573 | Close file |
| 2018-12-17T22:03:31.602044425Z | 62 | PC: 14573 | Close file |
| 2018-12-17T22:03:31.605339698Z | 67 | PC: 1391f | Get or set file attributes |
| 2018-12-17T22:03:31.612830858Z | 67 | PC: 13946 | Get or set file attributes |
| 2018-12-17T22:03:31.62278695Z | 61 | PC: 14523 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:03:31.62972535Z | 63 | PC: 145f6 | Read file or device (Read 26 bytes on handle 5) |
| 2018-12-17T22:03:31.638650351Z | 66 | PC: 14655 | Move file pointer |
| 2018-12-17T22:03:31.640505515Z | 60 | PC: 14523 | Create or truncate file |
| 2018-12-17T22:03:31.652256383Z | 64 | PC: 145f6 | Write file or device (Write 9312 bytes on handle 6) |
| 2018-12-17T22:03:31.661841538Z | 63 | PC: 145f6 | Read file or device (Read 36000 bytes on handle 5) |
| 2018-12-17T22:03:31.670160848Z | 64 | PC: 145f6 | Write file or device (Write 9312 bytes on handle 6) |
| 2018-12-17T22:03:31.6800585Z | 62 | PC: 14573 | Close file |
| 2018-12-17T22:03:31.68933173Z | 62 | PC: 14573 | Close file |
| 2018-12-17T22:03:31.691627449Z | 65 | PC: 1466c | Delete file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:03:31.703116944Z | 86 | PC: 146b0 | Rename file |
| 2018-12-17T22:03:31.720108268Z | 41 | PC: 13b66 | Parse filename |
| 2018-12-17T22:03:31.722311323Z | 41 | PC: 13b74 | Parse filename |
| 2018-12-17T22:03:31.724014117Z | 75 | PC: 13b7f | Execute program |
| 2018-12-17T22:03:31.753646674Z | 80 | PC: 240c9 | Set current PSP |
| 2018-12-17T22:03:31.755169372Z | 48 | PC: 240ce | Get DOS version |
| 2018-12-17T22:03:31.756940659Z | 99 | PC: 2a8b0 | Get DBCS lead byte table pointer |
| 2018-12-17T22:03:31.759974698Z | 101 | PC: 24154 | Get extended country info |
| 2018-12-17T22:03:31.762311267Z | 99 | PC: 2415a | Get DBCS lead byte table pointer |
| 2018-12-17T22:03:31.763808246Z | 74 | PC: 241bc | Reallocate memory |
| 2018-12-17T22:03:31.765472095Z | 25 | PC: 241f3 | Get default drive |
| 2018-12-17T22:03:31.767725783Z | 37 | PC: 23cb3 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T22:03:31.769058548Z | 37 | PC: 23cba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:03:31.770447746Z | 37 | PC: 23cc1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:03:31.775978511Z | 74 | PC: 22e5c | Reallocate memory |
| 2018-12-17T22:03:31.777654155Z | 72 | PC: 22e9d | Allocate memory |
| 2018-12-17T22:03:31.779440802Z | 72 | PC: 22ed5 | Allocate memory |
| 2018-12-17T22:03:31.782291629Z | 72 | PC: 22edd | Allocate memory |