.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:53:26.471284951Z | 25 | PC: 12a75 | Get default drive |
| 2018-12-17T22:53:26.473492298Z | 14 | PC: 12a7c | Set default drive (Drive = 'A') |
| 2018-12-17T22:53:26.477219852Z | 71 | PC: 12a86 | Get current directory |
| 2018-12-17T22:53:26.479130233Z | 78 | PC: 12a8d | Find first file |
| 2018-12-17T22:53:26.483476145Z | 67 | PC: 12aa0 | Get or set file attributes |
| 2018-12-17T22:53:26.487509219Z | 67 | PC: 12aa8 | Get or set file attributes |
| 2018-12-17T22:53:26.500693172Z | 61 | PC: 12ab0 | Open file (Filename = 'TEST.EXE') |
| 2018-12-17T22:53:26.507253853Z | 87 | PC: 12ab8 | Get or set file date and time |
| 2018-12-17T22:53:26.509166248Z | 64 | PC: 12a53 | Write file or device (Write 666 bytes on handle 5) |
| 2018-12-17T22:53:26.516783713Z | 87 | PC: 12aca | Get or set file date and time |
| 2018-12-17T22:53:26.51778041Z | 62 | PC: 12ace | Close file |
| 2018-12-17T22:53:26.52640146Z | 67 | PC: 12ad7 | Get or set file attributes |
| 2018-12-17T22:53:26.532340475Z | 79 | PC: 12a96 | Find next file |
| 2018-12-17T22:53:26.533823737Z | 59 | PC: 12ae2 | Change current directory |
| 2018-12-17T22:53:26.53692602Z | 44 | PC: 12ae8 | Get time 0x12ae8: cmp dl, 0x32 0x12aeb: ja 0x12b0f 0x12aed: jmp 0x12af0 0x12aef: nop 0x12af0: mov ah, 9 0x12af2: mov dx, 0x307 0x12af5: int 0x21 0x12af7: mov ah, 0x2c 0x12af9: int 0x21 0x12afb: cmp dl, 0xa 0x12afe: ja 0x12b0f 0x12b00: jmp 0x12b03 0x12b02: nop 0x12b03: cli 0x12b04: mov ah, 0 0x12b06: cdq 0x12b07: mov cx, 0x100 0x12b0a: int 0x26 0x12b0c: jmp 0x12b0f 0x12b0e: nop |
| 2018-12-17T22:53:26.538278264Z | 14 | PC: 12b14 | Set default drive (Drive = 'A') |
| 2018-12-17T22:53:26.539227706Z | 59 | PC: 12b1c | Change current directory |
| 2018-12-17T22:53:26.541083948Z | 76 | PC: 12b20 | Terminate with return code (Return code = '3') |