.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:55:16.344339132Z | 48 | PC: 12a4b | Get DOS version |
| 2018-12-17T22:55:16.346922375Z | 47 | PC: 12a53 | Get disk transfer address |
| 2018-12-17T22:55:16.348108384Z | 26 | PC: 12a62 | Set disk transfer address |
| 2018-12-17T22:55:16.349203757Z | 78 | PC: 12a6c | Find first file |
| 2018-12-17T22:55:16.355619413Z | 61 | PC: 12a85 | Open file (Filename = 'OWS\TEMP ') |
| 2018-12-17T22:55:16.363028561Z | 64 | PC: 12a93 | Write file or device (Write 113 bytes on handle 5) |
| 2018-12-17T22:55:16.369968293Z | 62 | PC: 12a97 | Close file |
| 2018-12-17T22:55:16.38360933Z | 76 | PC: 12a9b | Terminate with return code (Return code = '5') |