.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:10:27.159555299Z | 48 | PC: 12a98 | Get DOS version |
| 2018-12-17T23:10:27.163719593Z | 54 | PC: 12aa6 | Get free disk space |
| 2018-12-17T23:10:27.180231856Z | 42 | PC: 12ab2 | Get date 0x12ab2: cmp cx, 0x1993 0x12ab6: jae 0x12abb 0x12ab8: jmp 0x12b4c 0x12abb: push cs 0x12abc: pop ds 0x12abd: mov ah, 9 0x12abf: lea dx, word ptr [bp + 0x275] 0x12ac3: int 0x21 0x12ac5: mov ah, 0x1a 0x12ac7: mov dx, 0xfd00 0x12aca: int 0x21 0x12acc: mov ax, word ptr cs:[0x2c] 0x12ad0: mov ds, ax 0x12ad2: mov si, 0 0x12ad5: mov cx, 0x4000 0x12ad8: lodsb al, byte ptr [si] 0x12ad9: cmp al, 1 0x12adb: je 0x12adf 0x12add: loop 0x12ad8 0x12adf: inc si |
| 2018-12-17T23:10:27.183074864Z | 26 | PC: 12b53 | Set disk transfer address |
| 2018-12-17T23:10:27.184551923Z | 78 | PC: 12b5d | Find first file |
| 2018-12-17T23:10:27.192261857Z | 67 | PC: 12b6a | Get or set file attributes |
| 2018-12-17T23:10:27.199070746Z | 67 | PC: 12b72 | Get or set file attributes |
| 2018-12-17T23:10:27.216898614Z | 61 | PC: 12b77 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:10:27.231293955Z | 87 | PC: 12b7d | Get or set file date and time |
| 2018-12-17T23:10:27.233189441Z | 63 | PC: 12b8a | Read file or device (Read 4 bytes on handle 5) |
| 2018-12-17T23:10:27.244567335Z | 66 | PC: 12bb0 | Move file pointer |
| 2018-12-17T23:10:27.247635397Z | 66 | PC: 12bd1 | Move file pointer |
| 2018-12-17T23:10:27.250700473Z | 63 | PC: 12bdb | Read file or device (Read 82 bytes on handle 5) |
| 2018-12-17T23:10:27.254136927Z | 66 | PC: 12bb0 | Move file pointer |
| 2018-12-17T23:10:27.25593467Z | 44 | PC: 12c26 | Get time 0x12c26: cmp dl, 0 0x12c29: jne 0x12c35 0x12c2b: mov ah, 9 0x12c2d: lea dx, word ptr [bp + 0x3da] 0x12c31: int 0x21 0x12c33: jmp 0x12c22 0x12c35: mov byte ptr cs:[bp + 0x17], dl 0x12c3a: lea si, word ptr [bp + 3] 0x12c3e: mov di, 0xfb00 0x12c41: mov cx, 0x18 0x12c44: rep movsb byte ptr es:[di], byte ptr [si] 0x12c46: lea si, word ptr [bp + 0x1b] 0x12c4a: mov cx, 0x41e 0x12c4d: lodsb al, byte ptr [si] 0x12c4e: xor al, dl 0x12c50: stosb byte ptr es:[di], al 0x12c51: loop 0x12c4d 0x12c53: mov ah, 0x40 0x12c55: mov dx, 0xfb00 0x12c58: mov cx, 0x436 |
| 2018-12-17T23:10:27.259744417Z | 64 | PC: 12c5d | Write file or device (Write 1078 bytes on handle 5) |
| 2018-12-17T23:10:27.269187041Z | 66 | PC: 12bb0 | Move file pointer |
| 2018-12-17T23:10:27.27101013Z | 64 | PC: 12c6e | Write file or device (Write 4 bytes on handle 5) |
| 2018-12-17T23:10:27.279346472Z | 87 | PC: 12c9e | Get or set file date and time |
| 2018-12-17T23:10:27.281065496Z | 62 | PC: 12ca2 | Close file |
| 2018-12-17T23:10:27.289674682Z | 67 | PC: 12cab | Get or set file attributes |
| 2018-12-17T23:10:27.295385034Z | 65 | PC: 12cb3 | Delete file (Filename = 'chklist.cps') |
| 2018-12-17T23:10:27.301559921Z | 26 | PC: 12c78 | Set disk transfer address |