.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T21:51:16.492183542Z | 44 | PC: 13e88 | Get time 0x13e88: cmp word ptr [si + 0x11b], 0 0x13e8d: je 0x13e9b 0x13e8f: cmp word ptr [si + 0x11c], 0 0x13e94: je 0x13e9b 0x13e96: cmp dh, 0xf 0x13e99: jle 0x13ea9 0x13e9b: cmp dl, 0 0x13e9e: je 0x13e84 0x13ea0: cmp dh, 0 0x13ea3: je 0x13e84 0x13ea5: mov word ptr [si + 0x11b], dx 0x13ea9: mov bp, word ptr [si + 0x236] 0x13ead: add bp, 0x103 0x13eb1: lea dx, word ptr [si + 0x238] 0x13eb5: xor cx, cx 0x13eb7: mov ah, 0x4e 0x13eb9: int 0x21 0x13ebb: jb 0x13f39 0x13ebd: mov ax, 0x3d02 0x13ec0: mov dx, 0x9e |
| 2018-12-17T21:51:16.495579001Z | 78 | PC: 13ebb | Find first file |
| 2018-12-17T21:51:16.501777483Z | 61 | PC: 13ec5 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T21:51:16.508447576Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T21:51:16.515638765Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.518573756Z | 61 | PC: 13ec5 | Open file (Filename = 'PRINT.COM') |
| 2018-12-17T21:51:16.525326907Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 6) |
| 2018-12-17T21:51:16.533144717Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.536861479Z | 61 | PC: 13ec5 | Open file (Filename = 'HELLO.COM') |
| 2018-12-17T21:51:16.544906783Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 7) |
| 2018-12-17T21:51:16.551620727Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.554695314Z | 61 | PC: 13ec5 | Open file (Filename = 'PHANG.COM') |
| 2018-12-17T21:51:16.56219049Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 8) |
| 2018-12-17T21:51:16.569006858Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.571921118Z | 61 | PC: 13ec5 | Open file (Filename = 'PRINTA~1.COM') |
| 2018-12-17T21:51:16.578461473Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 9) |
| 2018-12-17T21:51:16.585042282Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.588974332Z | 61 | PC: 13ec5 | Open file (Filename = 'MANDEL.COM') |
| 2018-12-17T21:51:16.595479401Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 10) |
| 2018-12-17T21:51:16.60192838Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.605141878Z | 61 | PC: 13ec5 | Open file (Filename = 'PAH.COM') |
| 2018-12-17T21:51:16.612395453Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 11) |
| 2018-12-17T21:51:16.618506573Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.621484925Z | 61 | PC: 13ec5 | Open file (Filename = 'TEST.COM') |
| 2018-12-17T21:51:16.637237007Z | 63 | PC: 13f42 | Read file or device (Read 3 bytes on handle 12) |
| 2018-12-17T21:51:16.639972559Z | 66 | PC: 13f42 | Move file pointer |
| 2018-12-17T21:51:16.642205611Z | 63 | PC: 13f42 | Read file or device (Read 2 bytes on handle 12) |
| 2018-12-17T21:51:16.644208955Z | 79 | PC: 13ebb | Find next file |
| 2018-12-17T21:51:16.645865681Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=00001400h/0000005120d bytes. ') |
| 2018-12-17T21:51:16.649052905Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |