.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:05:15.101341475Z | 26 | PC: 12e59 | Set disk transfer address |
| 2018-12-17T23:05:15.102912199Z | 78 | PC: 12e63 | Find first file |
| 2018-12-17T23:05:15.111256661Z | 67 | PC: 12e70 | Get or set file attributes |
| 2018-12-17T23:05:15.118003138Z | 67 | PC: 12e78 | Get or set file attributes |
| 2018-12-17T23:05:15.13632959Z | 61 | PC: 12e7d | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:05:15.146355594Z | 87 | PC: 12e83 | Get or set file date and time |
| 2018-12-17T23:05:15.148601307Z | 63 | PC: 12e90 | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T23:05:15.157000241Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:05:15.159954947Z | 44 | PC: 12ec9 | Get time 0x12ec9: mov byte ptr cs:[bp + 0x17], dl 0x12ecd: lea si, word ptr [bp + 4] 0x12ed0: mov di, 0xfd00 0x12ed3: mov cx, 0x17 0x12ed6: rep movsb byte ptr es:[di], byte ptr [si] 0x12ed8: lea si, word ptr [bp + 0x1b] 0x12edb: mov cx, 0xf5 0x12ede: lodsb al, byte ptr [si] 0x12edf: xor al, dl 0x12ee1: stosb byte ptr es:[di], al 0x12ee2: loop 0x12ede 0x12ee4: mov ah, 0x40 0x12ee6: mov dx, 0xfd00 0x12ee9: mov cx, 0x10c 0x12eec: int 0x21 0x12eee: mov ax, 0x4200 0x12ef1: call 0x22eb0 0x12ef4: mov ah, 0x40 0x12ef6: lea dx, word ptr [bp + 0x103] 0x12efa: mov cx, 4 |
| 2018-12-17T23:05:15.165087118Z | 64 | PC: 12eee | Write file or device (Write 268 bytes on handle 5) |
| 2018-12-17T23:05:15.17393183Z | 66 | PC: 12eb6 | Move file pointer |
| 2018-12-17T23:05:15.176733729Z | 64 | PC: 12eff | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T23:05:15.184528548Z | 87 | PC: 12f18 | Get or set file date and time |
| 2018-12-17T23:05:15.186833893Z | 62 | PC: 12f1c | Close file |
| 2018-12-17T23:05:15.196695657Z | 67 | PC: 12f25 | Get or set file attributes |
| 2018-12-17T23:05:15.210163393Z | 26 | PC: 12f09 | Set disk transfer address |