.
| Time | Syscall Op | Syscall Name |
|---|---|---|
| 2018-12-17T22:30:12.422193094Z | 47 | PC: 12a72 | Get disk transfer address |
| 2018-12-17T22:30:12.423491029Z | 26 | PC: 12a84 | Set disk transfer address |
| 2018-12-17T22:30:12.425747328Z | 25 | PC: 12a93 | Get default drive |
| 2018-12-17T22:30:12.426956394Z | 14 | PC: 12a9d | Set default drive (Drive = 'C') |
| 2018-12-17T22:30:12.428374795Z | 78 | PC: 12aaa | Find first file |
| 2018-12-17T22:30:12.441884999Z | 67 | PC: 12ad7 | Get or set file attributes |
| 2018-12-17T22:30:12.448380279Z | 67 | PC: 12ae4 | Get or set file attributes |
| 2018-12-17T22:30:13.099933932Z | 61 | PC: 12aec | Open file (Filename = 'COMMAND.COM') |
| 2018-12-17T22:30:13.109531196Z | 87 | PC: 12af3 | Get or set file date and time |
| 2018-12-17T22:30:13.116177115Z | 44 | PC: 12b01 | Get time 0x12b01: or dl, dl 0x12b03: je 0x12afd 0x12b05: mov byte ptr [bp + 0x18a], dl 0x12b09: mov ah, 0x3f 0x12b0b: lea dx, word ptr [bp + 0x158] 0x12b0f: mov cx, 3 0x12b12: int 0x21 0x12b14: mov ax, 0x4202 0x12b17: xor cx, cx 0x12b19: xor dx, dx 0x12b1b: int 0x21 0x12b1d: sub ax, 3 0x12b20: mov word ptr cs:[0xfb2d], ax 0x12b24: mov byte ptr cs:[0xfb2c], 0xe9 0x12b2a: lea si, word ptr [bp - 3] 0x12b2d: mov di, 0xfcbc 0x12b30: mov cx, 0x190 0x12b33: cld 0x12b34: rep movsb byte ptr es:[di], byte ptr [si] 0x12b36: mov si, 0xfcdc |
| 2018-12-17T22:30:13.11997877Z | 63 | PC: 12b14 | Read file or device (Read 3 bytes on handle 5) |
| 2018-12-17T22:30:13.123501897Z | 66 | PC: 12b1d | Move file pointer |
| 2018-12-17T22:30:13.12680588Z | 64 | PC: 12b46 | Write file or device (Write 400 bytes on handle 5) |
| 2018-12-17T22:30:13.134680592Z | 66 | PC: 12b4f | Move file pointer |
| 2018-12-17T22:30:13.136431176Z | 64 | PC: 12b59 | Write file or device (Write 3 bytes on handle 5) |
| 2018-12-17T22:30:13.141129331Z | 87 | PC: 12b6e | Get or set file date and time |
| 2018-12-17T22:30:13.143749612Z | 62 | PC: 12b72 | Close file |
| 2018-12-17T22:30:13.151394901Z | 67 | PC: 12b7f | Get or set file attributes |
| 2018-12-17T22:30:13.160522917Z | 26 | PC: 12b8e | Set disk transfer address |
| 2018-12-17T22:30:13.161703016Z | 14 | PC: 12b98 | Set default drive (Drive = 'A') |