.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:18:34.61878804Z | 47 | PC: 12e56 | Get disk transfer address |
| 2018-12-17T22:18:34.620554965Z | 26 | PC: 12e5e | Set disk transfer address |
| 2018-12-17T22:18:34.621714827Z | 71 | PC: 12fcd | Get current directory |
| 2018-12-17T22:18:34.624486595Z | 59 | PC: 12fd5 | Change current directory |
| 2018-12-17T22:18:34.628784798Z | 47 | PC: 12fea | Get disk transfer address |
| 2018-12-17T22:18:34.630026181Z | 26 | PC: 12ff8 | Set disk transfer address |
| 2018-12-17T22:18:34.631780908Z | 78 | PC: 13003 | Find first file |
| 2018-12-17T22:18:34.637326463Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.639804648Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.642148778Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.644323553Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.646805662Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.649112634Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.651377986Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.654279504Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.657229179Z | 79 | PC: 1302b | Find next file |
| 2018-12-17T22:18:34.659734733Z | 47 | PC: 13051 | Get disk transfer address |
| 2018-12-17T22:18:34.661508601Z | 26 | PC: 13060 | Set disk transfer address |
| 2018-12-17T22:18:34.662706976Z | 78 | PC: 1306e | Find first file |
| 2018-12-17T22:18:34.66858942Z | 47 | PC: 13086 | Get disk transfer address |
| 2018-12-17T22:18:34.670229774Z | 61 | PC: 1309f | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:18:34.676475542Z | 63 | PC: 130ab | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:18:34.682471883Z | 66 | PC: 130b5 | Move file pointer |
| 2018-12-17T22:18:34.684346996Z | 62 | PC: 130ba | Close file |
| 2018-12-17T22:18:34.686098633Z | 67 | PC: 130da | Get or set file attributes |
| 2018-12-17T22:18:34.695534795Z | 61 | PC: 130df | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:18:34.7054359Z | 64 | PC: 130eb | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:18:34.709130037Z | 66 | PC: 130f5 | Move file pointer |
| 2018-12-17T22:18:34.711653462Z | 64 | PC: 131ea | Write file or device (Write 940 bytes on handle 5) |
| 2018-12-17T22:18:34.722240132Z | 87 | PC: 13109 | Get or set file date and time |
| 2018-12-17T22:18:34.72398728Z | 62 | PC: 1310d | Close file |
| 2018-12-17T22:18:34.7321986Z | 67 | PC: 1311a | Get or set file attributes |
| 2018-12-17T22:18:34.742093806Z | 26 | PC: 13080 | Set disk transfer address |
| 2018-12-17T22:18:34.74335247Z | 26 | PC: 1303d | Set disk transfer address |
| 2018-12-17T22:18:34.744443321Z | 59 | PC: 12fdf | Change current directory |
| 2018-12-17T22:18:34.746119656Z | 42 | PC: 1312f | Get date 0x1312f: mov al, dl 0x13131: cwde 0x13132: ret 0x13133: mov ah, 0x2a 0x13135: int 0x21 0x13137: mov al, dh 0x13139: cwde 0x1313a: ret 0x1313b: push sp 0x1313c: outsw dx, word ptr [si] 0x1313d: popaw 0x1313f: jns 0x1316d 0x13141: and byte ptr [bp + si + 0x46], cl 0x13144: dec bx 0x13145: and byte ptr [si + 0x69], ch 0x13148: jbe 0x131af 0x1314a: jae 0x1316c 0x1314c: popaw 0x1314d: popaw 0x1314f: imul bp, word ptr [bp + 0x20], 0x7962 |
| 2018-12-17T22:18:34.748424839Z | 26 | PC: 12fad | Set disk transfer address |
| 2018-12-17T22:18:34.749518509Z | 9 | PC: 12e26 | Display string (String= 'BCDEF- This is a 1000 byte COM test, 1994 ') |