.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:27:25.71041408Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:27:25.712071943Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:27:25.713104412Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:27:25.714008208Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:27:25.715428573Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:27:25.7165589Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:27:25.717583797Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:27:25.718840421Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:27:25.719943531Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:27:25.720825424Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:27:25.721755404Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:27:25.726437465Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:27:25.72752587Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:27:25.728696025Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:27:25.730286465Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:27:25.731388257Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:27:25.732539425Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:27:25.734119417Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:27:25.736566108Z | 53 | PC: 15dba | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:27:25.738991154Z | 37 | PC: 15dcf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:27:25.741704886Z | 37 | PC: 15dd7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:27:25.743285411Z | 37 | PC: 15ddf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:27:25.744808741Z | 37 | PC: 15de7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:27:25.747492186Z | 68 | PC: 16c33 | I/O control for devices (Set for = '') |
| 2018-12-17T22:27:25.868370397Z | 37 | PC: 157e1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:27:25.870651923Z | 48 | PC: 16763 | Get DOS version |
| 2018-12-17T22:27:25.873537961Z | 25 | PC: 167f0 | Get default drive |
| 2018-12-17T22:27:25.874744983Z | 71 | PC: 16803 | Get current directory |
| 2018-12-17T22:27:25.878523405Z | 61 | PC: 165a1 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:27:25.88737424Z | 66 | PC: 166d3 | Move file pointer |
| 2018-12-17T22:27:25.900831353Z | 63 | PC: 16674 | Read file or device (Read 20251 bytes on handle 5) |
| 2018-12-17T22:27:25.910377769Z | 62 | PC: 165f1 | Close file |
| 2018-12-17T22:27:25.912858738Z | 42 | PC: 15327 | Get date 0x15327: xor ah, ah 0x15329: les di, ptr [bp + 6] 0x1532c: stosw word ptr es:[di], ax 0x1532d: mov al, dl 0x1532f: les di, ptr [bp + 0xa] 0x15332: stosw word ptr es:[di], ax 0x15333: mov al, dh 0x15335: les di, ptr [bp + 0xe] 0x15338: stosw word ptr es:[di], ax 0x15339: xchg ax, cx 0x1533a: les di, ptr [bp + 0x12] 0x1533d: stosw word ptr es:[di], ax 0x1533e: pop bp 0x1533f: retf 0x10 0x15342: push bp 0x15343: mov bp, sp 0x15345: mov cx, word ptr [bp + 0xa] 0x15348: mov dh, byte ptr [bp + 8] 0x1534b: mov dl, byte ptr [bp + 6] 0x1534e: mov ah, 0x2b |
| 2018-12-17T22:27:25.916879989Z | 44 | PC: 1535d | Get time 0x1535d: xor ah, ah 0x1535f: mov al, dl 0x15361: les di, ptr [bp + 6] 0x15364: stosw word ptr es:[di], ax 0x15365: mov al, dh 0x15367: les di, ptr [bp + 0xa] 0x1536a: stosw word ptr es:[di], ax 0x1536b: mov al, cl 0x1536d: les di, ptr [bp + 0xe] 0x15370: stosw word ptr es:[di], ax 0x15371: mov al, ch 0x15373: les di, ptr [bp + 0x12] 0x15376: stosw word ptr es:[di], ax 0x15377: pop bp 0x15378: retf 0x10 0x1537b: push bp 0x1537c: mov bp, sp 0x1537e: mov ch, byte ptr [bp + 0xc] 0x15381: mov cl, byte ptr [bp + 0xa] 0x15384: mov dh, byte ptr [bp + 8] |
| 2018-12-17T22:27:25.920317809Z | 25 | PC: 167f0 | Get default drive |
| 2018-12-17T22:27:25.921850242Z | 71 | PC: 16803 | Get current directory |
| 2018-12-17T22:27:25.927215794Z | 14 | PC: 16849 | Set default drive (Drive = 'A') |
| 2018-12-17T22:27:25.928919284Z | 25 | PC: 1684d | Get default drive |
| 2018-12-17T22:27:25.930513699Z | 59 | PC: 168b7 | Change current directory |