.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:18:55.296785783Z | 25 | PC: 13296 | Get default drive |
| 2018-12-17T22:18:55.313529915Z | 14 | PC: 132c5 | Set default drive (Drive = 'C') |
| 2018-12-17T22:18:55.314772509Z | 26 | PC: 132d0 | Set disk transfer address |
| 2018-12-17T22:18:55.315728602Z | 78 | PC: 132df | Find first file |
| 2018-12-17T22:18:55.321725866Z | 67 | PC: 13338 | Get or set file attributes |
| 2018-12-17T22:18:55.326748946Z | 67 | PC: 13348 | Get or set file attributes |
| 2018-12-17T22:18:55.680768259Z | 61 | PC: 13352 | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T22:18:55.688755203Z | 87 | PC: 1335e | Get or set file date and time |
| 2018-12-17T22:18:55.690311664Z | 63 | PC: 13370 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:18:55.692912565Z | 66 | PC: 13384 | Move file pointer |
| 2018-12-17T22:18:55.694701447Z | 64 | PC: 133ab | Write file or device (Write 415 bytes on handle 5) |
| 2018-12-17T22:18:55.701971548Z | 66 | PC: 133bf | Move file pointer |
| 2018-12-17T22:18:55.703714047Z | 64 | PC: 133cd | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:18:55.706908293Z | 87 | PC: 133de | Get or set file date and time |
| 2018-12-17T22:18:55.709198279Z | 62 | PC: 133e2 | Close file |
| 2018-12-17T22:18:55.715795757Z | 67 | PC: 133ea | Get or set file attributes |
| 2018-12-17T22:18:55.719733219Z | 26 | PC: 133f1 | Set disk transfer address |
| 2018-12-17T22:18:55.721738655Z | 14 | PC: 133f9 | Set default drive (Drive = 'A') |
| 2018-12-17T22:18:55.723180374Z | 9 | PC: 12a86 | Display string (String= 'Goat file (COM/....). Size=00000834h/0000002100d bytes. ') |
| 2018-12-17T22:18:55.728655764Z | 48 | PC: 12a8f | Get DOS version |
| 2018-12-17T22:18:55.73041073Z | 61 | PC: 12b5c | Open file (Filename = '') |
| 2018-12-17T22:18:55.74031572Z | 93 | PC: 12afe | File sharing functions |
| 2018-12-17T22:18:55.742699665Z | 9 | PC: 12a86 | Display string (String= 'Size change=019Fh/00415d. ') |
| 2018-12-17T22:18:55.747326781Z | 76 | PC: 12ae3 | Terminate with return code (Return code = '1') |