.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:44:01.264270441Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:44:01.266293531Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '2' AKA 'Character output') |
| 2018-12-17T22:44:01.268321327Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '27' AKA 'Get allocation info for default drive') |
| 2018-12-17T22:44:01.27003144Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '33' AKA 'Random read') |
| 2018-12-17T22:44:01.27283784Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:44:01.274283221Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:44:01.275544181Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '52' AKA 'Get InDOS flag pointer') |
| 2018-12-17T22:44:01.277009051Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '53' AKA 'Get interrupt vector') |
| 2018-12-17T22:44:01.278888611Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '54' AKA 'Get free disk space') |
| 2018-12-17T22:44:01.280053125Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '55' AKA 'Get or set switch character') |
| 2018-12-17T22:44:01.28116988Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '56' AKA 'Get or set country info') |
| 2018-12-17T22:44:01.285713221Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '57' AKA 'Create subdirectory') |
| 2018-12-17T22:44:01.288009751Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '58' AKA 'Remove subdirectory') |
| 2018-12-17T22:44:01.289487814Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '59' AKA 'Change current directory') |
| 2018-12-17T22:44:01.292178149Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '60' AKA 'Create or truncate file') |
| 2018-12-17T22:44:01.293386428Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '61' AKA 'Open file') |
| 2018-12-17T22:44:01.294915841Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '62' AKA 'Close file') |
| 2018-12-17T22:44:01.297134087Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:44:01.298995021Z | 53 | PC: 13faa | Get interrupt vector (Interrupt = '117' AKA 'UNKNOWN!') |
| 2018-12-17T22:44:01.300756967Z | 37 | PC: 13fbf | Set interrupt vector (Interrupt = '0' AKA 'Program terminate') |
| 2018-12-17T22:44:01.30330957Z | 37 | PC: 13fc7 | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:44:01.304729847Z | 37 | PC: 13fcf | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:44:01.305905758Z | 37 | PC: 13fd7 | Set interrupt vector (Interrupt = '63' AKA 'Read file or device') |
| 2018-12-17T22:44:01.308216377Z | 68 | PC: 14b97 | I/O control for devices (Set for = '') |
| 2018-12-17T22:44:01.309747976Z | 44 | PC: 14cce | Get time 0x14cce: mov word ptr [0x3e], cx 0x14cd2: mov word ptr [0x40], dx 0x14cd6: retf 0x14cd7: mov cx, di 0x14cd9: mov si, 0xa 0x14cdc: mov bx, dx 0x14cde: or bx, bx 0x14ce0: jns 0x14cf3 0x14ce2: neg bx 0x14ce4: neg ax 0x14ce6: sbb bx, 0 0x14ce9: call 0x14cf3 0x14cec: dec di 0x14ced: mov byte ptr es:[di], 0x2d 0x14cf1: inc cx 0x14cf2: ret 0x14cf3: xor dx, dx 0x14cf5: xchg ax, bx 0x14cf6: div si 0x14cf8: xchg ax, bx |
| 2018-12-17T22:44:01.314056062Z | 48 | PC: 148c2 | Get DOS version |
| 2018-12-17T22:44:01.316764578Z | 61 | PC: 14700 | Open file (Filename = 'A:\TEST.EXE') |
| 2018-12-17T22:44:01.323502447Z | 66 | PC: 14832 | Move file pointer |
| 2018-12-17T22:44:01.325303556Z | 63 | PC: 147d3 | Read file or device (Read 5 bytes on handle 5) |
| 2018-12-17T22:44:01.330300294Z | 62 | PC: 14750 | Close file |
| 2018-12-17T22:44:01.3324557Z | 13 | PC: 12a47 | Disk reset |
| 2018-12-17T22:44:03.522888492Z | 72 | PC: 8f1b9 | Allocate memory |
| 2018-12-17T22:44:03.524607572Z | 72 | PC: 8f1bd | Allocate memory |
| 2018-12-17T22:44:03.526560732Z | 99 | PC: 90858 | Get DBCS lead byte table pointer |
| 2018-12-17T22:44:03.528735884Z | 61 | PC: 91f88 | Open file (Filename = 'C:\WINDOWS\HIMEM.SYS') |
| 2018-12-17T22:44:03.53672188Z | 66 | PC: 91f95 | Move file pointer |
| 2018-12-17T22:44:03.53800505Z | 62 | PC: 91fc1 | Close file |
| 2018-12-17T22:44:03.539666373Z | 75 | PC: 91fe0 | Execute program |
| 2018-12-17T22:44:03.55110774Z | 98 | PC: 916f1 | Get current PSP |
| 2018-12-17T22:44:03.55222075Z | 9 | PC: c605 | Display string (String= ' 6� � r�&;] u') |
| 2018-12-17T22:44:03.55512353Z | 48 | PC: c609 | Get DOS version |
| 2018-12-17T22:44:03.557795535Z | 9 | PC: c382 | Display string (String= ' Installed A20 handler number ') |
| 2018-12-17T22:44:03.559934084Z | 2 | PC: c38c | Character output (Char = '32') |
| 2018-12-17T22:44:03.561884312Z | 2 | PC: c3a7 | Character output (Char = '2e') |
| 2018-12-17T22:44:03.564328089Z | 9 | PC: c6d9 | Display string (String= '���� �VH�VD���V@������� �� ���� �_���Ku��t1��� ���� �D�����t �� ��������a 1��Z � �� � �W���� ����� �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-17T22:44:03.567581015Z | 9 | PC: c6e0 | Display string (String= ' �5 � ��|�����(���������Nj�(������� �p�^') |
| 2018-12-17T22:44:03.570848981Z | 61 | PC: 91f88 | Open file (Filename = 'C:\WINDOWS\SMARTDRV.EXE') |
| 2018-12-17T22:44:03.578737034Z | 66 | PC: 91f95 | Move file pointer |
| 2018-12-17T22:44:03.580553548Z | 62 | PC: 91fc1 | Close file |
| 2018-12-17T22:44:03.582429724Z | 75 | PC: 91fe0 | Execute program |
| 2018-12-17T22:44:03.595059275Z | 98 | PC: 916f1 | Get current PSP |
| 2018-12-17T22:44:03.598444296Z | 82 | PC: 13d46 | Get DOS internal pointers (SYSVARS) |
| 2018-12-17T22:44:03.599635726Z | 53 | PC: 13ac3 | Get interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-17T22:44:03.600670855Z | 37 | PC: 13ad6 | Set interrupt vector (Interrupt = '19' AKA 'Delete file') |
| 2018-12-17T22:44:03.602441496Z | 53 | PC: 13ae0 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:44:03.603570872Z | 37 | PC: 13af3 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:44:03.60467212Z | 9 | PC: 13a0d | Display string (Could not find end pointer) |
| 2018-12-17T22:44:03.609821978Z | 62 | PC: 8f8eb | Close file |
| 2018-12-17T22:44:03.611127473Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.612409535Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.614177609Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.615316992Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.61639623Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.618121561Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.619244147Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.620323254Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.622428404Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.623677461Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.624858703Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.62667759Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.627909084Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.629127509Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.630873872Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.632178576Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.633522968Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.635362224Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.636518829Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.637625617Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.639400144Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.640520126Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.641677708Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.643505857Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.644748014Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.645925324Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.647580109Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.648669452Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.649775973Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.651343407Z | 62 | PC: 8f8f2 | Close file |
| 2018-12-17T22:44:03.652460724Z | 61 | PC: 8f8ff | Open file (Filename = '') |
| 2018-12-17T22:44:03.655455422Z | 62 | PC: 8f90e | Close file |
| 2018-12-17T22:44:03.657204954Z | 69 | PC: 8f915 | Duplicate handle |
| 2018-12-17T22:44:03.658388711Z | 69 | PC: 8f919 | Duplicate handle |
| 2018-12-17T22:44:03.659558802Z | 61 | PC: 9387b | Open file (Filename = '') |
| 2018-12-17T22:44:03.66304949Z | 68 | PC: 9386b | I/O control for devices (Set for = '') |
| 2018-12-17T22:44:03.664213415Z | 61 | PC: 9387b | Open file (Filename = '') |
| 2018-12-17T22:44:03.667146467Z | 68 | PC: 9386b | I/O control for devices (Set for = '') |
| 2018-12-17T22:44:03.668958935Z | 74 | PC: 8f9c4 | Reallocate memory |
| 2018-12-17T22:44:03.670121105Z | 72 | PC: 8f9e0 | Allocate memory |
| 2018-12-17T22:44:03.671334573Z | 72 | PC: 8f9e4 | Allocate memory |
| 2018-12-17T22:44:03.672956544Z | 74 | PC: 8f9fb | Reallocate memory |
| 2018-12-17T22:44:03.674103322Z | 72 | PC: 8fa02 | Allocate memory |
| 2018-12-17T22:44:03.675311152Z | 72 | PC: 8fa06 | Allocate memory |
| 2018-12-17T22:44:03.677020846Z | 73 | PC: 8fa11 | Release memory |
| 2018-12-17T22:44:03.678622143Z | 73 | PC: 8efea | Release memory |
| 2018-12-17T22:44:03.680323426Z | 74 | PC: 8f003 | Reallocate memory |
| 2018-12-17T22:44:03.683205606Z | 72 | PC: 8f054 | Allocate memory |
| 2018-12-17T22:44:03.685340842Z | 72 | PC: 8f058 | Allocate memory |
| 2018-12-17T22:44:03.687928686Z | 73 | PC: 8f060 | Release memory |
| 2018-12-17T22:44:03.690599875Z | 61 | PC: 8f080 | Open file (Filename = '') |
| 2018-12-17T22:44:03.699583982Z | 63 | PC: 8f095 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T22:44:03.705756969Z | 66 | PC: 8f0ad | Move file pointer |
| 2018-12-17T22:44:03.708536004Z | 62 | PC: 8f0d1 | Close file |
| 2018-12-17T22:44:03.711044373Z | 75 | PC: 8f0f2 | Execute program |
| 2018-12-17T22:44:03.725551447Z | 80 | PC: 12be9 | Set current PSP |
| 2018-12-17T22:44:03.726808177Z | 48 | PC: 12bee | Get DOS version |
| 2018-12-17T22:44:03.728160427Z | 99 | PC: 193d0 | Get DBCS lead byte table pointer |
| 2018-12-17T22:44:03.730289508Z | 101 | PC: 12c74 | Get extended country info |
| 2018-12-17T22:44:03.732223577Z | 99 | PC: 12c7a | Get DBCS lead byte table pointer |
| 2018-12-17T22:44:03.733472187Z | 74 | PC: 12cdc | Reallocate memory |
| 2018-12-17T22:44:03.734909508Z | 72 | PC: 1355d | Allocate memory |
| 2018-12-17T22:44:03.736984426Z | 25 | PC: 13596 | Get default drive |
| 2018-12-17T22:44:03.738023414Z | 71 | PC: 135ad | Get current directory |
| 2018-12-17T22:44:03.740226269Z | 59 | PC: 135ba | Change current directory |
| 2018-12-17T22:44:03.745926156Z | 59 | PC: 135c8 | Change current directory |
| 2018-12-17T22:44:03.749437241Z | 59 | PC: 135d3 | Change current directory |
| 2018-12-17T22:44:03.751613381Z | 25 | PC: 12d13 | Get default drive |
| 2018-12-17T22:44:03.75292736Z | 37 | PC: 127d3 | Set interrupt vector (Interrupt = '34' AKA 'Random write') |
| 2018-12-17T22:44:03.753768644Z | 37 | PC: 127da | Set interrupt vector (Interrupt = '35' AKA 'Get file size in records') |
| 2018-12-17T22:44:03.754575713Z | 37 | PC: 127e1 | Set interrupt vector (Interrupt = '36' AKA 'Set random record number') |
| 2018-12-17T22:44:03.756491098Z | 80 | PC: 1301d | Set current PSP |
| 2018-12-17T22:44:03.75719254Z | 37 | PC: 13041 | Set interrupt vector (Interrupt = '46' AKA 'Set verify flag') |
| 2018-12-17T22:44:03.75808762Z | 53 | PC: 13362 | Get interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:44:03.75952389Z | 37 | PC: 13383 | Set interrupt vector (Interrupt = '47' AKA 'Get disk transfer address') |
| 2018-12-17T22:44:03.760726588Z | 51 | PC: 13417 | Get or set Ctrl-Break |
| 2018-12-17T22:44:03.761877582Z | 72 | PC: 130ec | Allocate memory |
| 2018-12-17T22:44:03.763527281Z | 61 | PC: 131b2 | Open file (Filename = '') |
| 2018-12-17T22:44:03.767111731Z | 62 | PC: 131ba | Close file |
| 2018-12-17T22:44:03.768518562Z | 51 | PC: 1344c | Get or set Ctrl-Break |
| 2018-12-17T22:44:03.769773473Z | 74 | PC: 1197c | Reallocate memory |
| 2018-12-17T22:44:03.77073139Z | 72 | PC: 11991 | Allocate memory |
| 2018-12-17T22:44:03.77173961Z | 73 | PC: 119b2 | Release memory |
| 2018-12-17T22:44:03.77311722Z | 72 | PC: 119bd | Allocate memory |
| 2018-12-17T22:44:03.774433058Z | 73 | PC: 119df | Release memory |
| 2018-12-17T22:44:03.77556501Z | 72 | PC: 119f5 | Allocate memory |
| 2018-12-17T22:44:03.777453431Z | 72 | PC: 119fd | Allocate memory |