.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:35:07.798481396Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:07.80092246Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:07.802877337Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:07.804758277Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:07.806771656Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:07.808951521Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:07.810298292Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:07.811547204Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:07.815519875Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:07.817366355Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:07.818842306Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:07.820943631Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:07.822832872Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:07.824593452Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:07.826735156Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:07.828453846Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:07.830437008Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:07.83278942Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:07.835210287Z | 53 | PC: 1314a | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:07.837711485Z | 37 | PC: 1315f | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:07.840781353Z | 37 | PC: 13167 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:07.842475607Z | 37 | PC: 1316f | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:07.844087633Z | 37 | PC: 13177 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:07.846731837Z | 68 | PC: 13d66 | I/O control for devices (Set for = '�O�:���II �x ����ø`��w���@') |
| 2018-12-17T22:35:07.848704651Z | 26 | PC: 12fc7 | Set disk transfer address |
| 2018-12-17T22:35:07.850770114Z | 78 | PC: 12fd3 | Find first file |
| 2018-12-17T22:35:07.860613877Z | 61 | PC: 137b5 | Open file (Filename = 'TEST.EXE') |
| 2018-12-17T22:35:07.870890704Z | 63 | PC: 13888 | Read file or device (Read 2 bytes on handle 5) |
| 2018-12-17T22:35:07.874017177Z | 66 | PC: 138e7 | Move file pointer |
| 2018-12-17T22:35:07.875633334Z | 63 | PC: 13888 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:35:07.884210491Z | 62 | PC: 13805 | Close file |
| 2018-12-17T22:35:07.886607415Z | 26 | PC: 12feb | Set disk transfer address |
| 2018-12-17T22:35:07.888255822Z | 79 | PC: 12ff0 | Find next file |
| 2018-12-17T22:35:07.891632638Z | 42 | PC: 12f37 | Get date 0x12f37: xor ah, ah 0x12f39: les di, ptr [bp + 6] 0x12f3c: stosw word ptr es:[di], ax 0x12f3d: mov al, dl 0x12f3f: les di, ptr [bp + 0xa] 0x12f42: stosw word ptr es:[di], ax 0x12f43: mov al, dh 0x12f45: les di, ptr [bp + 0xe] 0x12f48: stosw word ptr es:[di], ax 0x12f49: xchg ax, cx 0x12f4a: les di, ptr [bp + 0x12] 0x12f4d: stosw word ptr es:[di], ax 0x12f4e: pop bp 0x12f4f: retf 0x10 0x12f52: push bp 0x12f53: mov bp, sp 0x12f55: mov cx, word ptr [bp + 0xa] 0x12f58: mov dh, byte ptr [bp + 8] 0x12f5b: mov dl, byte ptr [bp + 6] 0x12f5e: mov ah, 0x2b |
| 2018-12-17T22:35:07.894235367Z | 48 | PC: 13977 | Get DOS version |
| 2018-12-17T22:35:07.896144726Z | 61 | PC: 137b5 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:35:07.906534439Z | 60 | PC: 137b5 | Create or truncate file |
| 2018-12-17T22:35:07.926427733Z | 66 | PC: 138e7 | Move file pointer |
| 2018-12-17T22:35:07.927905317Z | 66 | PC: 13e65 | Move file pointer |
| 2018-12-17T22:35:07.929987793Z | 66 | PC: 13e73 | Move file pointer |
| 2018-12-17T22:35:07.931424471Z | 66 | PC: 13e81 | Move file pointer |
| 2018-12-17T22:35:07.933914089Z | 63 | PC: 13888 | Read file or device (Read 4096 bytes on handle 5) |
| 2018-12-17T22:35:07.943106801Z | 64 | PC: 13888 | Write file or device (Write 4096 bytes on handle 6) |
| 2018-12-17T22:35:07.966950659Z | 63 | PC: 13888 | Read file or device (Read 1024 bytes on handle 5) |
| 2018-12-17T22:35:07.974808067Z | 64 | PC: 13888 | Write file or device (Write 1024 bytes on handle 6) |
| 2018-12-17T22:35:07.980623207Z | 62 | PC: 13805 | Close file |
| 2018-12-17T22:35:07.986089415Z | 62 | PC: 13805 | Close file |
| 2018-12-17T22:35:07.98748001Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:07.988673894Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:07.989923076Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:07.991112209Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:07.992125147Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:07.993324368Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:07.994405658Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:07.995348483Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:07.996772823Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:07.998155627Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:07.999047539Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:08.00039846Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:08.001284697Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:08.002321012Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:08.003819736Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:08.004835793Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:08.005850411Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:08.007404328Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:08.008541504Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:08.009607461Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:08.011778935Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:08.013606704Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:08.022099041Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:08.023675714Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:08.025646571Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:08.027191889Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:08.028905473Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:08.03134694Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:08.032712242Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:08.034093175Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:08.036036402Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:08.037100219Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:08.038368427Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:08.040584482Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:08.042169344Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:08.043932316Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:08.046806584Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:08.048543843Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:08.050405202Z | 41 | PC: 1307f | Parse filename |
| 2018-12-17T22:35:08.052780909Z | 41 | PC: 1308d | Parse filename |
| 2018-12-17T22:35:08.055171566Z | 75 | PC: 13098 | Execute program |
| 2018-12-17T22:35:08.073559437Z | 9 | PC: 183ec | Display string (Could not find end pointer) |
| 2018-12-17T22:35:08.079821243Z | 76 | PC: 183f1 | Terminate with return code (Return code = '0') |
| 2018-12-17T22:35:08.083798578Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:08.085024667Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:08.086171628Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:08.087907786Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:08.089442673Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:08.091482606Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:08.093319861Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:08.094734571Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:08.095818483Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:08.097939777Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:08.099455541Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:08.100953423Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:08.103109728Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:08.104947393Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:08.106528288Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:08.109065552Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:08.111069252Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:08.112917444Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:08.114487029Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:08.116692552Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:08.118390728Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:08.120100776Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:08.124942431Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:08.128093234Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:08.130707046Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:08.133444396Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:08.135076196Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:08.136892337Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:08.139089481Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:08.140539348Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:08.142155083Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:08.144474821Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:08.146073235Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:08.148347832Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:08.151442664Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:08.153058945Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:08.154681665Z | 53 | PC: 130c8 | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:08.156713767Z | 37 | PC: 130d1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:08.158502464Z | 65 | PC: 138fe | Delete file (Filename = ' (irq %d dev %x) ') |
| 2018-12-17T22:35:08.172525124Z | 64 | PC: 1350d | Write file or device (Write 0 bytes on handle 1) |
| 2018-12-17T22:35:08.176292498Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:35:08.178071038Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:35:08.179877857Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:35:08.182510572Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:35:08.184588627Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:35:08.186328365Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:35:08.188312294Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:35:08.191109378Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:35:08.193735093Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:35:08.19553555Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:35:08.198483064Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:35:08.200261971Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:35:08.201961338Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:35:08.20486113Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:35:08.20745373Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:35:08.208868694Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:35:08.212696104Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:35:08.214517559Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:35:08.21625853Z | 37 | PC: 132a1 | Set interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:35:08.219148125Z | 76 | PC: 132e0 | Terminate with return code (Return code = '0') |