.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:08:02.507250086Z | 47 | PC: 12a9e | Get disk transfer address |
| 2018-12-17T23:08:02.50916737Z | 26 | PC: 12ab0 | Set disk transfer address |
| 2018-12-17T23:08:02.51094133Z | 25 | PC: 12abe | Get default drive |
| 2018-12-17T23:08:02.512188505Z | 14 | PC: 12ac8 | Set default drive (Drive = 'C') |
| 2018-12-17T23:08:02.513613665Z | 78 | PC: 12ad4 | Find first file |
| 2018-12-17T23:08:02.523237471Z | 67 | PC: 12b10 | Get or set file attributes |
| 2018-12-17T23:08:02.529205181Z | 67 | PC: 12b1d | Get or set file attributes |
| 2018-12-17T23:08:02.968559076Z | 61 | PC: 12b25 | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T23:08:02.976449471Z | 87 | PC: 12b2c | Get or set file date and time |
| 2018-12-17T23:08:02.978661207Z | 44 | PC: 12b3a | Get time 0x12b3a: or dl, dl 0x12b3c: je 0x12b36 0x12b3e: mov byte ptr [bp + 0x160], dl 0x12b42: mov ah, 0x3f 0x12b44: lea dx, word ptr [bp + 0x62] 0x12b47: mov cx, 3 0x12b4a: int 0x21 0x12b4c: mov ax, 0x4202 0x12b4f: xor cx, cx 0x12b51: xor dx, dx 0x12b53: int 0x21 0x12b55: sub ax, 3 0x12b58: mov word ptr cs:[0xfb2d], ax 0x12b5c: mov byte ptr cs:[0xfb2c], 0xe9 0x12b62: lea si, word ptr [bp - 3] 0x12b65: mov di, 0xfcbc 0x12b68: mov cx, 0x166 0x12b6b: cld 0x12b6c: rep movsb byte ptr es:[di], byte ptr [si] 0x12b6e: mov si, 0xfcd8 |
| 2018-12-17T23:08:02.981709167Z | 63 | PC: 12b4c | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:08:02.985944393Z | 66 | PC: 12b55 | Move file pointer |
| 2018-12-17T23:08:02.988206903Z | 64 | PC: 12b7e | Write file or device (Write 358 bytes on handle 5) |
| 2018-12-17T23:08:02.995795116Z | 66 | PC: 12b87 | Move file pointer |
| 2018-12-17T23:08:02.997487955Z | 64 | PC: 12b91 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:08:03.000711628Z | 87 | PC: 12ba6 | Get or set file date and time |
| 2018-12-17T23:08:03.003225771Z | 62 | PC: 12baa | Close file |
| 2018-12-17T23:08:03.011717066Z | 67 | PC: 12bb7 | Get or set file attributes |
| 2018-12-17T23:08:03.022204768Z | 26 | PC: 12bc6 | Set disk transfer address |
| 2018-12-17T23:08:03.032181995Z | 14 | PC: 12bd0 | Set default drive (Drive = 'A') |
| 2018-12-17T23:08:03.034071764Z | 9 | PC: 12a4a | Display string (String= 'This is a fake virus for Sibille Stern!') |