.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:18:07.180391967Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:18:07.182536926Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:18:07.183784526Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:18:07.185025547Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:18:07.190148388Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:18:07.191171024Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:18:07.19213312Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:18:07.193591642Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:18:07.194582372Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:18:07.195440022Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:18:07.196709019Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:18:07.197677153Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:18:07.198621822Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:18:07.199955028Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:18:07.200904405Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:18:07.201844324Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:18:07.203249523Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:18:07.204212693Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:18:07.205176485Z | 53 | PC: 1396a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:18:07.206276919Z | 37 | PC: 1397f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:18:07.207392461Z | 37 | PC: 13987 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:18:07.208297722Z | 37 | PC: 1398f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:18:07.209390087Z | 37 | PC: 13997 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:18:07.210819417Z | 68 | PC: 14939 | I/O control for devices (Set for = '') |
| 2018-12-17T22:18:07.212293115Z | 25 | PC: 144e2 | Get default drive |
| 2018-12-17T22:18:07.213309163Z | 71 | PC: 144f5 | Get current directory |
| 2018-12-17T22:18:07.217710612Z | 44 | PC: 14a70 | Get time 0x14a70: mov word ptr [0x6a], cx 0x14a74: mov word ptr [0x6c], dx 0x14a78: retf 0x14a79: mov di, 0x7e 0x14a7c: push ds 0x14a7d: pop es 0x14a7e: mov cx, 0x4a26 0x14a81: sub cx, di 0x14a83: shr cx, 1 0x14a85: xor ax, ax 0x14a87: cld 0x14a88: rep stosd dword ptr es:[di], eax 0x14a8a: ret 0x14a8b: add byte ptr [bx + si], al 0x14a8d: add byte ptr [bx + si], al 0x14a8f: add byte ptr [bx + si], al 0x14a91: add byte ptr [bx], al 0x14a93: aas 0x14a95: pop dx 0x14a96: pushaw |
| 2018-12-17T22:18:07.219805109Z | 48 | PC: 14455 | Get DOS version |
| 2018-12-17T22:18:07.221374854Z | 67 | PC: 13641 | Get or set file attributes |
| 2018-12-17T22:18:07.227697816Z | 67 | PC: 13668 | Get or set file attributes |
| 2018-12-17T22:18:07.243725437Z | 61 | PC: 14293 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:18:07.2501292Z | 87 | PC: 13682 | Get or set file date and time |
| 2018-12-17T22:18:07.252369619Z | 66 | PC: 143c5 | Move file pointer |
| 2018-12-17T22:18:07.25367837Z | 63 | PC: 14366 | Read file or device (Read 8928 bytes on handle 5) |
| 2018-12-17T22:18:07.261706965Z | 87 | PC: 136af | Get or set file date and time |
| 2018-12-17T22:18:07.263333424Z | 62 | PC: 142e3 | Close file |
| 2018-12-17T22:18:07.270292836Z | 67 | PC: 13668 | Get or set file attributes |
| 2018-12-17T22:18:07.279986834Z | 42 | PC: 135c7 | Get date 0x135c7: xor ah, ah 0x135c9: les di, ptr [bp + 6] 0x135cc: stosw word ptr es:[di], ax 0x135cd: mov al, dl 0x135cf: les di, ptr [bp + 0xa] 0x135d2: stosw word ptr es:[di], ax 0x135d3: mov al, dh 0x135d5: les di, ptr [bp + 0xe] 0x135d8: stosw word ptr es:[di], ax 0x135d9: xchg ax, cx 0x135da: les di, ptr [bp + 0x12] 0x135dd: stosw word ptr es:[di], ax 0x135de: pop bp 0x135df: retf 0x10 0x135e2: push bp 0x135e3: mov bp, sp 0x135e5: mov cx, word ptr [bp + 0xa] 0x135e8: mov dh, byte ptr [bp + 8] 0x135eb: mov dl, byte ptr [bp + 6] 0x135ee: mov ah, 0x2b |
| 2018-12-17T22:18:07.283445905Z | 14 | PC: 1453b | Set default drive (Drive = 'C') |
| 2018-12-17T22:18:07.284539537Z | 25 | PC: 1453f | Get default drive |
| 2018-12-17T22:18:07.285556516Z | 59 | PC: 145a9 | Change current directory |
| 2018-12-17T22:18:07.29173792Z | 14 | PC: 1453b | Set default drive (Drive = 'C') |
| 2018-12-17T22:18:07.292893482Z | 25 | PC: 1453f | Get default drive |
| 2018-12-17T22:18:07.293979457Z | 59 | PC: 145a9 | Change current directory |
| 2018-12-17T22:18:07.300243273Z | 14 | PC: 1453b | Set default drive (Drive = 'C') |
| 2018-12-17T22:18:07.301420163Z | 25 | PC: 1453f | Get default drive |
| 2018-12-17T22:18:07.302624733Z | 59 | PC: 145a9 | Change current directory |
| 2018-12-17T22:18:07.308799026Z | 14 | PC: 1453b | Set default drive (Drive = 'C') |
| 2018-12-17T22:18:07.31023452Z | 25 | PC: 1453f | Get default drive |
| 2018-12-17T22:18:07.312065605Z | 59 | PC: 145a9 | Change current directory |
| 2018-12-17T22:18:07.319938768Z | 48 | PC: 14455 | Get DOS version |
| 2018-12-17T22:18:07.321326269Z | 26 | PC: 136df | Set disk transfer address |
| 2018-12-17T22:18:07.322526514Z | 78 | PC: 136eb | Find first file |
| 2018-12-17T22:18:07.330850225Z | 42 | PC: 135c7 | Get date 0x135c7: xor ah, ah 0x135c9: les di, ptr [bp + 6] 0x135cc: stosw word ptr es:[di], ax 0x135cd: mov al, dl 0x135cf: les di, ptr [bp + 0xa] 0x135d2: stosw word ptr es:[di], ax 0x135d3: mov al, dh 0x135d5: les di, ptr [bp + 0xe] 0x135d8: stosw word ptr es:[di], ax 0x135d9: xchg ax, cx 0x135da: les di, ptr [bp + 0x12] 0x135dd: stosw word ptr es:[di], ax 0x135de: pop bp 0x135df: retf 0x10 0x135e2: push bp 0x135e3: mov bp, sp 0x135e5: mov cx, word ptr [bp + 0xa] 0x135e8: mov dh, byte ptr [bp + 8] 0x135eb: mov dl, byte ptr [bp + 6] 0x135ee: mov ah, 0x2b |
| 2018-12-17T22:18:07.333420501Z | 14 | PC: 1453b | Set default drive (Drive = 'A') |
| 2018-12-17T22:18:07.334636843Z | 25 | PC: 1453f | Get default drive |
| 2018-12-17T22:18:07.336750881Z | 59 | PC: 145a9 | Change current directory |
| 2018-12-17T22:18:07.340935636Z | 64 | PC: 13feb | Write file or device (Write 0 bytes on handle 1) |
| 2018-12-17T22:18:07.342568862Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:18:07.344612164Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:18:07.345742308Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:18:07.346795847Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:18:07.348512862Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:18:07.349837888Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:18:07.350938163Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:18:07.352651153Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:18:07.353840712Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:18:07.354902435Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:18:07.356986209Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:18:07.358206853Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:18:07.359265283Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:18:07.360793096Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:18:07.361959293Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:18:07.363029948Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:18:07.364244696Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:18:07.365428046Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:18:07.366391037Z | 37 | PC: 13ac1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:18:07.36751261Z | 76 | PC: 13b00 | Terminate with return code (Return code = '0') |