.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:15:57.136973791Z | 47 | PC: 12b96 | Get disk transfer address |
| 2018-12-17T23:15:57.138705126Z | 26 | PC: 12ba8 | Set disk transfer address |
| 2018-12-17T23:15:57.141257653Z | 25 | PC: 12bb7 | Get default drive |
| 2018-12-17T23:15:57.142324358Z | 14 | PC: 12bc1 | Set default drive (Drive = 'C') |
| 2018-12-17T23:15:57.143599976Z | 78 | PC: 12bce | Find first file |
| 2018-12-17T23:15:57.150393294Z | 67 | PC: 12c01 | Get or set file attributes |
| 2018-12-17T23:15:57.155545569Z | 67 | PC: 12c0e | Get or set file attributes |
| 2018-12-17T23:15:57.489389397Z | 61 | PC: 12c16 | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T23:15:57.49671727Z | 87 | PC: 12c1d | Get or set file date and time |
| 2018-12-17T23:15:57.498494711Z | 44 | PC: 12c2b | Get time 0x12c2b: or dl, dl 0x12c2d: je 0x12c27 0x12c2f: mov byte ptr [bp + 0x163], dl 0x12c33: mov ah, 0x3f 0x12c35: lea dx, word ptr [bp + 0x15a] 0x12c39: mov cx, 3 0x12c3c: int 0x21 0x12c3e: mov ax, 0x4202 0x12c41: xor cx, cx 0x12c43: xor dx, dx 0x12c45: int 0x21 0x12c47: sub ax, 3 0x12c4a: mov word ptr cs:[0xfb2d], ax 0x12c4e: mov byte ptr cs:[0xfb2c], 0xe9 0x12c54: lea si, word ptr [bp - 3] 0x12c57: mov di, 0xfcbc 0x12c5a: mov cx, 0x169 0x12c5d: cld 0x12c5e: rep movsb byte ptr es:[di], byte ptr [si] 0x12c60: mov si, 0xfcd8 |
| 2018-12-17T23:15:57.501001603Z | 63 | PC: 12c3e | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:15:57.504936129Z | 66 | PC: 12c47 | Move file pointer |
| 2018-12-17T23:15:57.506619904Z | 64 | PC: 12c70 | Write file or device (Write 361 bytes on handle 5) |
| 2018-12-17T23:15:57.51386969Z | 66 | PC: 12c79 | Move file pointer |
| 2018-12-17T23:15:57.515828943Z | 64 | PC: 12c83 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:15:57.518377212Z | 87 | PC: 12c98 | Get or set file date and time |
| 2018-12-17T23:15:57.52007321Z | 62 | PC: 12c9c | Close file |
| 2018-12-17T23:15:57.527873442Z | 67 | PC: 12ca9 | Get or set file attributes |
| 2018-12-17T23:15:57.537490428Z | 26 | PC: 12cb8 | Set disk transfer address |
| 2018-12-17T23:15:57.538687478Z | 14 | PC: 12cc2 | Set default drive (Drive = 'A') |