.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:05:54.163315563Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T23:05:54.165398924Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T23:05:54.167508368Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T23:05:54.171067829Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T23:05:54.17338353Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T23:05:54.174944989Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:05:54.176465352Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T23:05:54.178665959Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T23:05:54.188642786Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T23:05:54.190102993Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T23:05:54.191518905Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T23:05:54.198839511Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T23:05:54.201198497Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T23:05:54.203818205Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T23:05:54.207297721Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T23:05:54.210057324Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T23:05:54.213158009Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T23:05:54.226312339Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T23:05:54.228255894Z | 53 | PC: 147ea | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T23:05:54.230024902Z | 37 | PC: 147ff | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T23:05:54.232680307Z | 37 | PC: 14807 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T23:05:54.234246829Z | 37 | PC: 1480f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:05:54.236107043Z | 37 | PC: 14817 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T23:05:54.238652867Z | 68 | PC: 15368 | I/O control for devices (Set for = ',�;�!s��=') |
| 2018-12-17T23:05:54.347633814Z | 37 | PC: 14211 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T23:05:54.349906196Z | 42 | PC: 13f47 | Get date 0x13f47: xor ah, ah 0x13f49: les di, ptr [bp + 6] 0x13f4c: stosw word ptr es:[di], ax 0x13f4d: mov al, dl 0x13f4f: les di, ptr [bp + 0xa] 0x13f52: stosw word ptr es:[di], ax 0x13f53: mov al, dh 0x13f55: les di, ptr [bp + 0xe] 0x13f58: stosw word ptr es:[di], ax 0x13f59: xchg ax, cx 0x13f5a: les di, ptr [bp + 0x12] 0x13f5d: stosw word ptr es:[di], ax 0x13f5e: pop bp 0x13f5f: retf 0x10 0x13f62: push bp 0x13f63: mov bp, sp 0x13f65: mov cx, word ptr [bp + 0xa] 0x13f68: mov dh, byte ptr [bp + 8] 0x13f6b: mov dl, byte ptr [bp + 6] 0x13f6e: mov ah, 0x2b |
| 2018-12-17T23:05:54.353637822Z | 61 | PC: 14f40 | Open file (Filename = 'C:\DOS\MEM.DAT') |
| 2018-12-17T23:05:54.362206964Z | 61 | PC: 14f40 | Open file (Filename = 'C:\DOS\MEM.EXE') |
| 2018-12-17T23:05:54.369992207Z | 62 | PC: 14f90 | Close file |
| 2018-12-17T23:05:54.37207849Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T23:05:54.37381036Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T23:05:54.375337686Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T23:05:54.376566091Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T23:05:54.377959856Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T23:05:54.379028818Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T23:05:54.380092147Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T23:05:54.381551158Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T23:05:54.382521955Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T23:05:54.383498986Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T23:05:54.38494207Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:05:54.386349137Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:05:54.387629045Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T23:05:54.394764474Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T23:05:54.395912798Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T23:05:54.39700665Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T23:05:54.398645568Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T23:05:54.39976541Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T23:05:54.4007937Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T23:05:54.402516975Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T23:05:54.403766955Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T23:05:54.40497123Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T23:05:54.406782129Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T23:05:54.408168064Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T23:05:54.409364655Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T23:05:54.41113402Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T23:05:54.412323186Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T23:05:54.413535947Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T23:05:54.415415031Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T23:05:54.416962043Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T23:05:54.418163144Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T23:05:54.419798193Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T23:05:54.421256604Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T23:05:54.422946246Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T23:05:54.424583326Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T23:05:54.426899472Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T23:05:54.428094732Z | 53 | PC: 14146 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T23:05:54.429293125Z | 37 | PC: 1414f | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T23:05:54.431309339Z | 41 | PC: 140fd | Parse filename |
| 2018-12-17T23:05:54.434337078Z | 41 | PC: 1410b | Parse filename |
| 2018-12-17T23:05:54.435604672Z | 75 | PC: 14116 | Execute program |
| 2018-12-17T23:05:54.458855679Z | 80 | PC: 1aec9 | Set current PSP |
| 2018-12-17T23:05:54.459992265Z | 48 | PC: 1aece | Get DOS version |
| 2018-12-17T23:05:54.46219153Z | 99 | PC: 216b0 | Get DBCS lead byte table pointer |
| 2018-12-17T23:05:54.465830766Z | 101 | PC: 1af54 | Get extended country info |
| 2018-12-17T23:05:54.467275156Z | 99 | PC: 1af5a | Get DBCS lead byte table pointer |
| 2018-12-17T23:05:54.468701418Z | 74 | PC: 1afbc | Reallocate memory |
| 2018-12-17T23:05:54.47157232Z | 25 | PC: 1aff3 | Get default drive |
| 2018-12-17T23:05:54.473088407Z | 37 | PC: 1aab3 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T23:05:54.474661707Z | 37 | PC: 1aaba | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T23:05:54.47717398Z | 37 | PC: 1aac1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T23:05:54.481764047Z | 74 | PC: 19c5c | Reallocate memory |
| 2018-12-17T23:05:54.508197405Z | 72 | PC: 19c9d | Allocate memory |
| 2018-12-17T23:05:54.509928766Z | 72 | PC: 19cd5 | Allocate memory |
| 2018-12-17T23:05:54.51202407Z | 72 | PC: 19cdd | Allocate memory |