.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:25:03.142726558Z | 26 | PC: 12a73 | Set disk transfer address |
| 2018-12-17T22:25:03.143932985Z | 71 | PC: 12a7d | Get current directory |
| 2018-12-17T22:25:03.150674866Z | 78 | PC: 12a96 | Find first file |
| 2018-12-17T22:25:03.158228083Z | 67 | PC: 12ab3 | Get or set file attributes |
| 2018-12-17T22:25:03.175561614Z | 61 | PC: 12ab8 | Open file (Filename = 'SLEEP.COM') |
| 2018-12-17T22:25:03.184292361Z | 63 | PC: 12ac4 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:25:03.192404136Z | 66 | PC: 12b00 | Move file pointer |
| 2018-12-17T22:25:03.194448301Z | 64 | PC: 12b1c | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:25:03.198229702Z | 66 | PC: 12b25 | Move file pointer |
| 2018-12-17T22:25:03.202308376Z | 44 | PC: 12b29 | Get time 0x12b29: mov word ptr [bp + 0x274], dx 0x12b2d: mov ax, cs 0x12b2f: add ax, 0x100 0x12b32: mov es, ax 0x12b34: mov cx, 0xbd 0x12b37: lea si, word ptr [bp + 0x103] 0x12b3b: xor di, di 0x12b3d: rep movsd dword ptr es:[di], dword ptr [si] 0x12b3f: inc word ptr es:[0xb2] 0x12b44: push bx 0x12b45: mov bx, 0xf 0x12b48: push es 0x12b49: pop ds 0x12b4a: call 0x12baf 0x12b4d: pop bx 0x12b4e: xor dx, dx 0x12b50: mov cx, 0x179 0x12b53: mov ah, 0x40 0x12b55: int 0x21 0x12b57: mov ax, 0x5701 |
| 2018-12-17T22:25:03.206455583Z | 64 | PC: 12b57 | Write file or device (Write 377 bytes on handle 5) |
| 2018-12-17T22:25:03.230647788Z | 87 | PC: 12b64 | Get or set file date and time |
| 2018-12-17T22:25:03.232298111Z | 62 | PC: 12b68 | Close file |
| 2018-12-17T22:25:03.251229602Z | 67 | PC: 12b7b | Get or set file attributes |
| 2018-12-17T22:25:03.266406751Z | 59 | PC: 12a8d | Change current directory |