.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:54:44.00571074Z | 250 | PC: 12a7b | UNKNOWN! |
| 2018-12-17T22:54:44.007920093Z | 47 | PC: 12a89 | Get disk transfer address |
| 2018-12-17T22:54:44.009441824Z | 26 | PC: 12a9b | Set disk transfer address |
| 2018-12-17T22:54:44.010964611Z | 25 | PC: 12aaa | Get default drive |
| 2018-12-17T22:54:44.012461325Z | 14 | PC: 12ab4 | Set default drive (Drive = 'C') |
| 2018-12-17T22:54:44.014148685Z | 78 | PC: 12ac1 | Find first file |
| 2018-12-17T22:54:44.02017554Z | 67 | PC: 12aee | Get or set file attributes |
| 2018-12-17T22:54:44.025771535Z | 67 | PC: 12afb | Get or set file attributes |
| 2018-12-17T22:54:44.502102064Z | 61 | PC: 12b03 | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T22:54:44.508351469Z | 87 | PC: 12b0a | Get or set file date and time |
| 2018-12-17T22:54:44.509703328Z | 44 | PC: 12b18 | Get time 0x12b18: or dl, dl 0x12b1a: je 0x12b14 0x12b1c: mov byte ptr [bp + 0x252], dl 0x12b20: mov ah, 0x3f 0x12b22: lea dx, word ptr [bp + 0x162] 0x12b26: mov cx, 3 0x12b29: int 0x21 0x12b2b: mov ax, 0x4202 0x12b2e: xor cx, cx 0x12b30: xor dx, dx 0x12b32: int 0x21 0x12b34: sub ax, 3 0x12b37: mov word ptr cs:[0xfb2d], ax 0x12b3b: mov byte ptr cs:[0xfb2c], 0xe9 0x12b41: lea si, word ptr [bp - 3] 0x12b44: nop 0x12b45: mov di, 0xfcbc 0x12b48: mov cx, 0x258 0x12b4b: cld 0x12b4c: rep movsb byte ptr es:[di], byte ptr [si] |
| 2018-12-17T22:54:44.511906321Z | 63 | PC: 12b2b | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:54:44.513720531Z | 66 | PC: 12b34 | Move file pointer |
| 2018-12-17T22:54:44.514872321Z | 64 | PC: 12b5e | Write file or device (Write 600 bytes on handle 5) |
| 2018-12-17T22:54:44.525644742Z | 66 | PC: 12b67 | Move file pointer |
| 2018-12-17T22:54:44.527442993Z | 64 | PC: 12b71 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:54:44.530728861Z | 87 | PC: 12b86 | Get or set file date and time |
| 2018-12-17T22:54:44.538575882Z | 62 | PC: 12b8a | Close file |
| 2018-12-17T22:54:44.545250312Z | 67 | PC: 12b97 | Get or set file attributes |
| 2018-12-17T22:54:44.558278156Z | 26 | PC: 12ba6 | Set disk transfer address |
| 2018-12-17T22:54:44.562174044Z | 14 | PC: 12bb0 | Set default drive (Drive = 'A') |