.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:03:50.367553955Z | 48 | PC: 12ba6 | Get DOS version |
| 2018-12-17T23:03:50.368950671Z | 47 | PC: 12bb2 | Get disk transfer address |
| 2018-12-17T23:03:50.370997987Z | 26 | PC: 12bc5 | Set disk transfer address |
| 2018-12-17T23:03:50.373150918Z | 78 | PC: 12c51 | Find first file |
| 2018-12-17T23:03:50.380877751Z | 67 | PC: 12c8f | Get or set file attributes |
| 2018-12-17T23:03:50.388353665Z | 67 | PC: 12ca2 | Get or set file attributes |
| 2018-12-17T23:03:50.405708378Z | 61 | PC: 12cad | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:03:50.413308561Z | 87 | PC: 12cb9 | Get or set file date and time |
| 2018-12-17T23:03:50.415742642Z | 44 | PC: 12cc5 | Get time 0x12cc5: and dh, 0x58 0x12cc8: jne 0x12cda 0x12cca: mov ah, 0x40 0x12ccc: mov cx, 5 0x12ccf: mov dx, si 0x12cd1: add dx, 0x8a 0x12cd5: int 0x21 0x12cd7: jmp 0x12d3e 0x12cd9: nop 0x12cda: mov ah, 0x3f 0x12cdc: mov cx, 3 0x12cdf: mov dx, 0xa 0x12ce2: nop 0x12ce3: add dx, si 0x12ce5: int 0x21 0x12ce7: jb 0x12d3e 0x12ce9: cmp ax, 3 0x12cec: jne 0x12d3e 0x12cee: mov ax, 0x4202 0x12cf1: mov cx, 0 |
| 2018-12-17T23:03:50.41854467Z | 63 | PC: 12ce7 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:03:50.425803438Z | 66 | PC: 12cf9 | Move file pointer |
| 2018-12-17T23:03:50.428836231Z | 64 | PC: 12d1d | Write file or device (Write 648 bytes on handle 5) |
| 2018-12-17T23:03:50.438789148Z | 66 | PC: 12d2f | Move file pointer |
| 2018-12-17T23:03:50.440354987Z | 64 | PC: 12d3e | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:03:50.448504069Z | 87 | PC: 12d53 | Get or set file date and time |
| 2018-12-17T23:03:50.450469557Z | 62 | PC: 12d57 | Close file |
| 2018-12-17T23:03:50.45946276Z | 67 | PC: 12d66 | Get or set file attributes |
| 2018-12-17T23:03:50.471413135Z | 26 | PC: 12d73 | Set disk transfer address |
| 2018-12-17T23:03:50.472940326Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-17T23:03:50.477629484Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |