.
Time | Syscall Op | Syscall Name |
---|---|---|
2018-12-17T22:53:06.761706635Z | 26 | PC: 12a75 | Set disk transfer address |
2018-12-17T22:53:06.763841465Z | 78 | PC: 12a7f | Find first file |
2018-12-17T22:53:06.769850961Z | 67 | PC: 12a8c | Get or set file attributes |
2018-12-17T22:53:06.776255882Z | 67 | PC: 12a94 | Get or set file attributes |
2018-12-17T22:53:06.796244658Z | 61 | PC: 12a99 | Open file (Filename = 'SLEEP.COM') |
2018-12-17T22:53:06.808373179Z | 87 | PC: 12a9f | Get or set file date and time |
2018-12-17T22:53:06.809650728Z | 63 | PC: 12aac | Read file or device (Read 4 bytes on handle 5) |
2018-12-17T22:53:06.81627576Z | 66 | PC: 12ad2 | Move file pointer |
2018-12-17T22:53:06.818039269Z | 44 | PC: 12ae5 | Get time 0x12ae5: mov byte ptr cs:[bp + 0x17], dl 0x12ae9: lea si, word ptr [bp + 4] 0x12aec: mov di, 0xfd00 0x12aef: mov cx, 0x17 0x12af2: rep movsb byte ptr es:[di], byte ptr [si] 0x12af4: lea si, word ptr [bp + 0x1b] 0x12af7: mov cx, 0xf5 0x12afa: lodsb al, byte ptr [si] 0x12afb: xor al, dl 0x12afd: stosb byte ptr es:[di], al 0x12afe: loop 0x12afa 0x12b00: mov ah, 0x40 0x12b02: mov dx, 0xfd00 0x12b05: mov cx, 0x10c 0x12b08: int 0x21 0x12b0a: mov ax, 0x4200 0x12b0d: call 0x22acc 0x12b10: mov ah, 0x40 0x12b12: lea dx, word ptr [bp + 0x103] 0x12b16: mov cx, 4 |
2018-12-17T22:53:06.820546929Z | 64 | PC: 12b0a | Write file or device (Write 268 bytes on handle 5) |
2018-12-17T22:53:06.828744867Z | 66 | PC: 12ad2 | Move file pointer |
2018-12-17T22:53:06.830725735Z | 64 | PC: 12b1b | Write file or device (Write 4 bytes on handle 5) |
2018-12-17T22:53:06.837184003Z | 87 | PC: 12b34 | Get or set file date and time |
2018-12-17T22:53:06.8386561Z | 62 | PC: 12b38 | Close file |
2018-12-17T22:53:06.847613519Z | 67 | PC: 12b41 | Get or set file attributes |
2018-12-17T22:53:06.859903207Z | 26 | PC: 12b25 | Set disk transfer address |