.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T23:12:37.315621995Z | 48 | PC: 12ba6 | Get DOS version |
| 2018-12-17T23:12:37.317266972Z | 47 | PC: 12bb2 | Get disk transfer address |
| 2018-12-17T23:12:37.319299714Z | 26 | PC: 12bc2 | Set disk transfer address |
| 2018-12-17T23:12:37.320666945Z | 78 | PC: 12c49 | Find first file |
| 2018-12-17T23:12:37.327315324Z | 67 | PC: 12c83 | Get or set file attributes |
| 2018-12-17T23:12:37.335095267Z | 67 | PC: 12c95 | Get or set file attributes |
| 2018-12-17T23:12:37.358732474Z | 61 | PC: 12ca0 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T23:12:37.367370084Z | 87 | PC: 12cac | Get or set file date and time |
| 2018-12-17T23:12:37.370365332Z | 44 | PC: 12cb6 | Get time 0x12cb6: and dh, 7 0x12cb9: jmp 0x12cca 0x12cbb: mov ah, 0x40 0x12cbd: mov cx, 5 0x12cc0: mov dx, si 0x12cc2: add dx, 0x8a 0x12cc6: int 0x21 0x12cc8: jmp 0x12d2f 0x12cca: mov ah, 0x3f 0x12ccc: mov cx, 3 0x12ccf: mov dx, 0xa 0x12cd2: nop 0x12cd3: add dx, si 0x12cd5: int 0x21 0x12cd7: jb 0x12d2f 0x12cd9: cmp ax, 3 0x12cdc: jne 0x12d2f 0x12cde: mov ax, 0x4202 0x12ce1: mov cx, 0 0x12ce4: mov dx, 0 |
| 2018-12-17T23:12:37.373059879Z | 63 | PC: 12cd7 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T23:12:37.380826503Z | 66 | PC: 12ce9 | Move file pointer |
| 2018-12-17T23:12:37.390714225Z | 64 | PC: 12d0d | Write file or device (Write 627 bytes on handle 5) |
| 2018-12-17T23:12:37.401534358Z | 66 | PC: 12d20 | Move file pointer |
| 2018-12-17T23:12:37.403132196Z | 64 | PC: 12d2f | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T23:12:37.410889421Z | 87 | PC: 12d42 | Get or set file date and time |
| 2018-12-17T23:12:37.413061874Z | 62 | PC: 12d46 | Close file |
| 2018-12-17T23:12:37.422153791Z | 67 | PC: 12d54 | Get or set file attributes |
| 2018-12-17T23:12:37.433412189Z | 26 | PC: 12d5e | Set disk transfer address |
| 2018-12-17T23:12:37.435971886Z | 9 | PC: 12a82 | Display string (String= 'Goat file (COM). Size=0000014Dh/0000000333d bytes. ') |
| 2018-12-17T23:12:37.44102227Z | 76 | PC: 12a86 | Terminate with return code (Return code = '36') |